Steps to configure SAML SSO for ManageEngine OpManager Plus

About OpManager Plus

OpManager Plus is an integrated solution offering network, server, and application monitoring capabilities. It provides real-time insights into the performance and availability of IT infrastructure, enabling proactive troubleshooting and optimization for enhanced operational efficiency.

MFA configuration: Upon successful SSO configuration for the application, click here to learn how to set up MFA, ensuring users complete multiple verification methods before accessing the Identity360 portal.

The following steps will help you enable single sign-on (SSO) for OpManager Plus from Identity360.

Prerequisites

  1. The MFA and SSO license for Identity360 is required to enable SSO for enterprise applications. For more information, refer to pricing details.
  2. Log in to Identity360 as an Admin or Super Admin.
  3. Navigate to Applications > Application Integration > Create New Application, and select OpManager Plus from the applications displayed.
    Note: You can also find OpManager Plus from the search bar located at the top.
  4. Under the General Settings tab, enter the Application Name and Description.
  5. Under the Choose Capabilities tab, choose SSO and click Continue.
    Identity360 application configuration general settingsGeneral settings of SSO configuration for OpManager Plus
  6. Under Integration Settings, navigate to the Single Sign On tab, click on Metadata Details. You can configure OpManager Plus by either uploading the metadata file or entering the details manually.
    • For uploading metadata file: Download the metadata file to be uploaded during the configuration of OpManager Plus in Identity360 by clicking Download from the Metadata field.
    • For manual configuration:
      • Copy the Login URL and Logout URL, which will be used during the configuration of OpManager Plus.
      • Download the SSO certificate by clicking Download from Signing Certificate field.
        Identity360 application configuration integration settingsIntegration Settings of SSO configuration for OpManager Plus

OpManager Plus (service provider) configuration steps

  1. Log in to OpManager Plus with an admin's credentials.
  2. In the OpManager Plus portal, go to Settings > General Settings > Authentication.
    OpManager Plus portal viewPortal view of OpManager Plus
  3. Select the SAML tab under Authentication.
  4. Under the Service Provider Details section, copy the Entity ID and Assertion Consumer URL. These will be used later.
    OpManager Plus Set up SSOConfiguration of SAML SSO from OpManager Plus
  5. The IdP details can be entered in two ways:
    • Using the Metadata file
      • Under the Identity Provider Details section, choose the Upload IdP metadata file radio button.
      • Enter Identity360 as the Name, and select Email ID from the Name ID Format drop-down.
      • Upload the metadata file downloaded in step 6a of the prerequisites section.
      • Click Save.
      • OpManager Plus manual configurationMetadata configuration from OpManager Plus
    • Manually entering the IdP details
      • Under the Identity Provider Details section, choose the Configure IdP information manually radio button.
      • Enter Identity360 as the Name, and select Email ID from the Name ID Format drop-down.
      • Paste the Login URL and Logout URL copied in step 6b(i) of the prerequisites section in the IdP Login URL and IdP Logout URL fields, respectively
        Note: The Logout URL is optional and can be skipped if single logout (automatically log out from Identity360 when logging out from OpManager Plus) is not required.
      • Upload the X.509 certificate file downloaded in step 6b(ii) of the prerequisites section in the IdP's Certificate field.
      • Click Save.
      • OpManager Plus manual configurationManual configuration from OpManager Plus
  6. Click Test connection to test the connection.
  7. Click Enable SAML SSO.
    SP connection test and SSO enablementOpManager Plus connection test and SSO enablement

Identity360 (identity provider) configuration steps

  1. Switch to Identity360's application configuration page.
  2. In the ACS URL field, enter the ACS/Recipient URL copied in step 4 of OpManager Plus configuration.
  3. In the Entity ID field, enter the Issuer URL/Entity ID value copied in step 4 of OpManager Plus configuration.
  4. Click Save.
    Identity360 application configurationIntegration Settings of SSO configuration for OpManager Plus
  5. To learn how to assign users or groups to one or more applications, refer to this page.

Your users should now be able to sign in to OpManager Plus through the Identity360 portal.

Note: For OpManager Plus, both SP-initiated and IdP-initiated flows are supported.

Don't see what you're looking for?

  •  

    Visit our community  

    Post your questions in the forum.

     
  •  

    Request additional resources  

    Send us your requirements.