Deploy a web SAML Application

This topic provides general information about how to deploy a web application for SAML-based single sign-on (SSO).

To not disrupt existing access to critical web applications, we recommend that you deploy a non-production application or an application that will have minimal impact on your users.

The steps for adding a web SAML application in the Identity Administration portal are similar across all applications. After configuring the SSO template in the Identity Administration portal, you then sign in to the web application to configure it for SSO. Steps for service provider configuration vary widely for each application. This topic also uses the following web applications as examples.

  • Salesforce
  • Workday

Add web applications in the Identity Administration portal

Before you configure any web applications for SSO, you need the following:

  • An active account for the application with administrator rights for your organization.
  • A signed certificate.

    You can either download one from the Identity Administration portal or use your organization’s trusted certificate.

You now must make configuration changes from the application itself using your application administrator credentials.

Generic SAML application configurations

At the most basic level, configuring SSO for SAML applications mean providing the necessary information for the application and CyberArk Identity to communicate. The specific information and configuration field names may vary for each application, but you can typically find the necessary information on the Trust page in the Identity Administration portal (Apps > Web Apps > specific SAML application > Trust).

It is helpful to open the web application and the Identity Administration portal simultaneously to copy and paste settings between the two browser windows.

Instructions for configuring the specific SAML applications follow.

Configure Salesforce

This article provides instructions for SSO access to Salesforce from the User Portal.

Back to top

Configure Workday

This article provides instructions for SSO access to Workday from the User Portal.