Steps to configure SAML SSO for Boomi

About Boomi

Boomi is an intelligent integration and automation platform that connects applications, data, and people to streamline business processes. It offers a unified platform for integration, API management, and data management, empowering organizations to automate workflows and achieve digital transformation.

The following steps will help you enable single sign-on (SSO) for Boomi from Identity360.

Prerequisites

1. The MFA and SSO license for Identity360 is required to enable SSO for enterprise applications. For more information, refer to pricing details.
2. Log in to Identity360 as an Admin or Super Admin.
3. Navigate to Applications > Application Integration > Create New Application, and select Boomi from the applications displayed.
   Note: You can also find Boomi from the search bar located at the top.
4. Under the General Settings tab, enter the Application Name and Description.
5. Under the Choose Capabilities tab, choose SSO and click Continue.
   General Settings of SSO configuration for Boomi
6. Under Integration Settings, navigate to the Single Sign On tab and click Metadata Details.
   • Copy the Login URL and Login URL values, which will be later used during the configuration of Boomi.
   • Download the SSO certificate by clicking Download from the Signing Certificate field.
   Integration Settings of SSO configuration for Boomi

Boomi (service provider) configuration steps

1. Log in to Boomi with admin privileges.
2. Navigate to Settings, and click Account Information and Setup.
   Portal view of the Boomi application
3. Navigate to the Security Options section, and click SSO Options.
4. Select Enabled under the Enable SAML Single Sign-On section.
5. Import the Signing Certificate, which was downloaded in step 6b of the prerequisites section.
   Note: The Signing Certificate provided by Identity360 will be in .pem format. It should be converted to .cer or .der format before importing.
6. Paste the Login URL and Logout URL values, which were copied in step 6a of the prerequisites section, in the Identity Provider Sign In URL and Sign Out Redirect URL fields, respectively.
   Enabling SAML SSO in Boomi
7. Select the Federation ID is in NameID element of the Subject option under Federation ID Location field.
8. Select the Unspecified option under the Name ID Policy field.
9. Select the Password Protected Transport option under the SAML Authentication Context field.
10. Select the Exact option under the SAML Authentication Context Comparison Levels field.
11. Select the Unencrypted option under the Assertion Encryption field.
12. Copy the AtomSphere Sign In URL value, which will be used in Identity360 configuration.
13. Click Save.
    SSO configured in the Boomi application

Identity360 (identity provider) configuration steps

1. Switch to Identity360's application configuration page.
2. Enter the Account ID of your Boomi account. If the AtomSphere Sign In URL in Boomi is https://platform.boomi.com/sso/apple-K5CNNR/saml, then apple-K5CNNR is your Account ID.
3. Enter the Relay State parameter, if necessary.
   Note: Relay State is an optional parameter used with a SAML message to remember where you were or to direct you to a specific page after logging in.
   Integration Settings of SSO configuration for Boomi
4. Click Save.
5. To learn how to assign users or groups to one or more applications, refer to this page.

Your users will now be able to sign in to Boomi through the Identity360 portal.