Admin, identity & access controls — found from sitemap — LightOn

Cited by

Facts read from this source

• SSO protocols Report an error

  “Paradigm supports SSO via two protocols: SAML (Security Assertion Markup Language) OpenID Connect (OIDC)”

• Ldap authentication Report an error

  “For directory-based authentication, see LDAP Configuration.”

• SSO instance toggle Report an error

  “To activate SSO, you must go to the page Config Key from the administration and configure the following two fields: SSO: True”

• Company admin SSO permissions Report an error

  “DEFAULT_SSO_PERMISSIONS_FOR_COMPANY_ADMINS: This field allows you to define whether by default “Company admin” type users can configure their company’s SSO or not.”

• SSO per company Report an error

  “Company: Allows you to define which company you wish to link this SSO configuration to.”

• SAML metadata URL Report an error

  “https://<domain_name>/auth/saml/<client_id>/metadata/”

• SAML acs URL Report an error

  “ACS URL: https://<domain_name>/auth/saml/<client_id>/acs/”

• SAML attribute mapping Report an error

  “"attribute_mapping": { "email": "<your_email_key>" }”

• Oidc redirect uri Report an error

  “https://<domain_name>/auth/oidc/<provider_id>/login/callback/”

• SSO user group assignment Report an error

  “You can then assign this SAML configuration to the user group of your choice.”

• SSO provider guides Report an error

  “As an example, here are different guides for configuring your SSO: Google Microsoft”

• Saas domain Report an error

  “For our SaaS offer, this field will therefore be paradigm.lighton.ai.”

• SAML debugging Report an error

  “we advice to use a debugging tool such as SAML-tracer which can give you information about the SAML requests and responses between Paradigm and your Identity Provider.”

• SAML nameid Report an error

  “Name ID: Set this field to “Primary Email” Make sure to define a NameID in your configuration.”

• SAML default email attributes Report an error

  “http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress urn:oid:0.9.2342.19200300.100.1.3”

1 fact read from this page is not shown because it could not be confirmed on the page as captured.

Scores citing this record

• The Automation Lead Admin, identity & access controls
• The Automation Lead Admin, identity & access controls
• The Customer-Service Director Admin, identity & access controls
• The Customer-Service Director Admin, identity & access controls
• The Data Protection Officer Admin, identity & access controls
• The Data Protection Officer Admin, identity & access controls
• The Data Protection Officer Pricing transparency
• The Head of IT Admin, identity & access controls
• The Head of IT Admin, identity & access controls
• The Skeptic Admin, identity & access controls
• The Skeptic Admin, identity & access controls
• The Works Council Member Admin, identity & access controls
• The Works Council Member Admin, identity & access controls