Elastic Desktop Service:Configure SAML-based SSO

Configure Elastic Desktop Service as an SP

1. Obtain the SAML service provider (SP) metadata file from the Elastic Desktop Service console.

   1. Log on to the EDS enterprise console.

   2. In the left-side navigation pane, choose Networks & Storage > Office Network.

   3. In the top navigation bar, select a region.

   4. On the Office Network page, find the target office network for which SSO is enabled, and click its office network ID.

   5. On the office network details page, click the Other Information tab, and then click Download Application Metadata File next to Application Metadata.

2. In your IdP, create a SAML service provider configuration and use the metadata file to configure Elastic Desktop Service as a trusted SAML SP.

Configure your IdP in Elastic Desktop Service

1. On the office network details page, click the Other Information tab, and turn on the SSO switch.

   After you enable SSO, your IdP's logon page replaces the standard username and password logon page on EDS terminals.

2. Next to IdP Metadata, click Upload to upload your IdP's metadata file.

   Note

   The metadata file is typically an XML file. It contains the IdP's logon service URL and the X.509 public key certificate used to verify the IdP's SAML assertion signatures.

Create corresponding users

In Elastic Desktop Service, create users that correspond to your IdP users. For more information, see Create a convenience account or Create and manage enterprise AD accounts.

Configure your IdP in Elastic Desktop Service

1. In the left-side navigation pane, choose Users > Enterprise Identity Source.

2. On the Enterprise Identity Source page, do one of the following:

   • If you have not added an enterprise identity source, click the SAML card.

   • If an enterprise identity source already exists, click Add Enterprise Identity Source. Then, in the Add Enterprise Identity Source panel, click the SAML card.

3. In the Add Enterprise Identity Source panel, configure the following parameters and click OK.

   Parameter	Description
   Name	A name to identify your IdP.
   Type	Select SAML.
   IdP Metadata	Click Upload to upload your IdP's metadata file.
   Account Type	The supported account types are convenience account and enterprise AD account. If you select enterprise AD account, you must also select an AD domain.

Configure Elastic Desktop Service as an SP

1. Obtain the SAML SP metadata file from the Elastic Desktop Service console.

   1. In the left-side navigation pane, choose Users > Enterprise Identity Source.

   2. On the Enterprise Identity Source page, find the target enterprise identity source and click Edit in the Actions column.

   3. In the Edit Enterprise Identity Source panel, click Download File below Application Metadata.

2. In your IdP, create a SAML SP configuration and use the metadata file to configure Elastic Desktop Service as a trusted SAML SP.

Create corresponding users

In Elastic Desktop Service, create users that correspond to your IdP users. For more information, see Create a convenience account or Create and manage enterprise AD accounts.