SAML SSO basic process

Once the enterprise has completed its SSO deployment, enterprise employees can log in to the CDNetworks console in the way shown below.

Operation Steps :

1. Enterprise users use a browser to select CDNetworks as the target service on the login page of IdP.

The login URL allows you to view the service provider's corresponding login address on CDNetworks console

2. IDP authenticates the user, which successfully authenticates, generates a SAML response and returns it to the browser;
3. The browser redirects to the CDNetworks SSO Services page and forwards the SAML response to the SSO service.Start the SSO login service. If the SAML response contains properties mapped to multiple CDNetworks accounts, the system will first prompt the user to select an account to access the network;
4. Successful verification and return to login status.
5. The browser redirects to this URL to log in to the CDNetworks console as the specified account.

Configuration steps:

1. Upload the Yuan document of the enterprise IdP to Wangsu to establish a trust relationship between Wangsu and the enterprise IdP. For detailed configuration, please refer to SAML Configuration for SP
2. Download the Yuan metadata document and Upload it to the enterprise IdP to establish a trust relationship between the enterprise IdP and Wangsu. For detailed configuration, please refer to SAML Configuration for IDP
3. Configure the SAML assertion attributes forwarded by the enterprise IdP to China Netsu to complete the Netsu login verification. For detailed configuration, please see SAML Response of SSO