Wiz

Configuring Key9 Identity SAML SSO with Wiz

1. Service Provider ID (SP Entity ID):Can be found in the Wiz portal, via Details for your SAML Provider.

2. Service Provider Login URL (SSO URL):Can be found in the Wiz portal, via Details for your SAML Provider.

3. Service Provider Logout URL (SLO URL):Can be found in the Wiz portal, via Details for your SAML Provider.

4. IdP-Initiated Login URL:This will typically start with client_id and not https.

Please see Wiz documentation for setting up SSO. (You must be logged into Wix Portal to View Documents)

Wiz documentation can be found here.

Start configuring the SAML identity provider in Wiz

1. In the Wiz portal, navigate go to Settings > Access Management > SSO & Login Security, then click Add Identity Provider.

2. In the New SAML Identity Provider page, enter Key9-Identity as SAML Name. Then click Continue. The values required for Key9 (IdP) are generated.

From the Details for your SAML Provider screen Copy and paste the following URLs into Key9 Setup Items

1. Service Provider ID (SP Entity ID)

2. Service Provider Login URL (SSO URL)

3. Service Provider Logout URL (SLO URL)

4. Enable IdP-initiated logins and Copy IdP-Initiated Login URL

Click the Create Application button in Key9.

After you have created your Key9 application, click the SSO tab in the side navigation.

Back in the Wiz portal:

1. Leave the Enable Authentication Request Signing disabled.

2. Leave the Encrypt SAML Attributes disabled.

Return to the open tab with Wiz. You should be on the New SAML Identity Provider > SSO Providers Details page.

Enter the following values from Key9 into these Wiz fields:

1. Copy the Key9 SSO url to the Identity provider Single Sign-On URL field.

2. Copy the Key9 SLO url to the Identity provider Single Log-Out URL field.

3. Copy the Key9 Entity ID url to the Identity Provider Issuer URL or ID field.

4. Copy the Key9 X.509 Certificate to the Public Certificate field.

(To view and copy the x509 certificate in Key9, select View Certificate Details from the Certificate Options dropdown menu, then click the copy icon.)

Click Continue.

Refer to Wix documentation for configuring group mappings. (You must be logged into Wix Portal to View Documents)

Configure group mapping in Wiz

-------------------

By default, applications are not active upon creation. Active applications are immediately available to assign groups. Applications should only be activated when you have configured the Service Provider (SP).