Steps to configure SAML SSO for ManageEngine ADManager Plus MSP

About ADManager Plus MSP

ADManager Plus MSP is a comprehensive identity governance and administration solution for managed service providers. It streamlines user life cycle management by delegating technicians to handle provisioning to deprovisioning, automating tasks like password resets and AD cleanup, and providing comprehensive change reports from a unified console.

MFA configuration: Upon successful SSO configuration for the application, click here to learn how to set up MFA, ensuring users complete multiple verification methods before accessing the Identity360 portal.

The following steps will help you enable single sign-on (SSO) for ADManager Plus MSP from Identity360.

Prerequisites

  1. The MFA and SSO license for Identity360 is required to enable SSO for enterprise applications. For more information, refer to pricing details.
  2. Log in to Identity360 as an Admin or Super Admin.
  3. Navigate to Applications > Application Integration > Create New Application, and select ADManager Plus MSP from the applications displayed.
    Note: You can also find ADManager Plus MSP from the search bar located at the top.
  4. Under the General Settings tab, enter the Application Name and Description.
  5. Under the Choose Capabilities tab, choose SSO and click Continue.
    Identity360 application configuration general settingsGeneral settings of SSO configuration for ADManager Plus MSP
  6. Under Integration Settings, navigate to the Single Sign On tab, click on Metadata Details. You can configure ADManager Plus MSP by either uploading the metadata file or entering the details manually.
    • For uploading metadata file: Download the metadata file to be uploaded during the configuration of ADManager Plus MSP in Identity360 by clicking Download from the Metadata field.
    • For manual configuration: Copy the Entity ID, Login URL, Logout URL, and Signing certificate (X.509 certificate), which will be used during the configuration of ADManager Plus MSP.
      Identity360 application configuration integration settingsIntegration Settings of SSO configuration for ADManager Plus MSP

ADManager Plus MSP (service provider) configuration steps

  1. Log in to ADManager Plus MSP with admin credentials.
  2. Navigate to Delegation > Configuration > Logon Settings > Single Sign-On.
  3. Select the Enable Single Sign-on with Active Directory check box.
    ADManager Plus MSP Set up SSOConfiguration of SAML SSO from ADManager Plus MSP
  4. Choose the SAML Authentication radio button.
  5. In the Configure Identity Provider section, enter the details given below.
    • In the Identity Provider (IdP) field, choose the Custom SAML option.
    • For SAML Config Mode, you can either choose the Upload Metadata File option or the Manual Configuration option.
  6. Copy the values of the ACS/Recipient URL and the Issuer URL/Entity ID from the Service Provider Details section; these will be used later.
    ADManager Plus MSP configuration detailsConfiguration details from ADManager Plus MSP
  7. In the Mapping Attribute Selection section, click the Mapping Attribute drop-down and select the user login attribute that you wish to map with that of Identity360.
  8. Select the Force SAML Login option located at the bottom of this page if you wish to force users to log in to ADManager Plus MSP only through SSO.
  9. Click Save.

Identity360 (identity provider) configuration steps

  1. Switch to Identity360's application configuration page.
  2. In the ACS URL field, enter the ACS/Recipient URL copied in step 6 of ADManager Plus MSP configuration.
  3. In the Entity ID field, enter the Issuer URL/Entity ID value copied in step 6 of ADManager Plus MSP configuration.
  4. Click Save.
    Identity360 application configurationIntegration Settings of SSO configuration for ADManager Plus MSP
  5. To learn how to assign users or groups to one or more applications, refer to this page.

Your users should now be able to sign in to ADManager Plus MSP through the Identity360 portal.

Note: For ADManager Plus MSP, both SP-initiated and IdP-initiated flows are supported.

Don't see what you're looking for?

  •  

    Visit our community  

    Post your questions in the forum.

     
  •  

    Request additional resources  

    Send us your requirements.