SSO Access to Applications Through Plug-in Autocompletion

Configuration Process

Prerequisites

You have permissions to access the administrator portal.

Adding an Application

1. Log in to the administrator portal.
2. On the top navigation bar, choose Resources > Applications.
3. Click Add Custom Application in the Custom Applications section, set the logo and application name, and click Save.

Configuring the Application

Application configuration includes authentication configuration and user authorization.

• Authentication configuration
  1. Click the application added in Adding an Application and click the application icon on the application information page.
  2. In the General Information area, click next to Authentication to enable authentication, select Plug-in autocompletion, and click Save.
     

     The authentication mode is a one-time configuration and cannot be changed later.

     Figure 1 Selecting an authentication protocol
     
  3. Click Authentication Settings in the left pane, and configure the authentication parameters. OneAccess supports multiple login modes, including quick login, 3-factor login, frame login, and two-page login. The parameters to configure vary depending on the login mode.
     

     To avoid information leakage, do not include sensitive information in the configuration parameters.

     • Quick login

       The login page contains only two factors, username and password. Users can log in to the application without entering other information. See Figure 2.

       Figure 2 Logging in using a Huawei Cloud account
       
     • 3-factor login

       In addition to the username and password, users need to enter other information in a text box or select an option from the drop-down list on the login page. For example, to log in to an internal system, an employee needs to enter their username and password and select their department.

     • Frame login

       The username and password fields are enclosed in a frame, which is isolated from the login page.

     • Two-page login

       The login process is divided into two pages. To complete login, users need to switch from the first page to the second page.

• User authorization

  In the left pane, choose Authorization > Application Accounts. Then click Add Accounts to authorize specific users to access the application. To authorize access using a policy, see the descriptions about the application account authorization policy in Configuring an Application.

  

  • For details about access control and object models, see Configuring an Application.
  • User authorization is not required for applications through plug-in autocompletion. Users can directly set the authorization on the user portal.

Example of Configuring Huawei Cloud

The following uses Huawei Cloud as an example to describe how to configure quick login.

1. On the Huawei Cloud account login page, press F12, locate the account name/email address text box, and obtain the attribute type.
   Figure 3 Locating the account text box
   

2. Locate the password text box and obtain the attribute type.
   Figure 4 Locating the password text box
   

3. Locate the login button and obtain the attribute ID.
   Figure 5 Locating the login button
   

4. Configure the parameters for quick login.

   

   Table 1 Basic settings

   Parameter	Description
   Application URL	Access URL of the application. You are advised to set this parameter to the home page of the application.
   Login URL	Login page URL of the application. This parameter is required when you configure quick login, 3-factor login, or two-page login.
   Frame URL	Frame address of the application. This parameter is required when you configure frame login.
   Username Field	CSS selector for the username text box.
   Next Button	CSS selector for the Next button. This parameter is required when you configure two-page login.
   Password Field	CSS selector for the password text box.
   Extra Field	CSS selector for an additional text box. This parameter is required when you configure 3-factor login.
   Extra Mapping Field	Mapping attribute of an additional field. You can select the account name, full name, or password. This parameter is required when you configure 3-factor login.
   Login Button	CSS selector for the Log In button.
   Automatic Submission	Indicates whether the form (username and password) needs to be submitted automatically. If you select No, the form will be not be submitted automatically after a user enters their username and password. NOTE: If human-machine verification is involved on the login page, you are advised to select No.

   Table 2 Account settings

   Parameter	Description
   Account Creator	Owner of the account used to log in to the application. The options include Administrator and User. NOTE: If Account Creator is set to Administrator, you need to set Attributes to Set. If you select Password, only users can set their password for logging in to the application.

Logging In as a User

1. Log in to the user portal as an authorized user, and download the plug-in as prompted after successful login.
2. Decompress the plug-in package, drag the plug-in to Extensions, and then enable it.
3. Refresh the page of user portal and click the target application. A dialog box is displayed, asking you to enter the password. Enter the password and click the login button.
   

   If the Attributes to Set parameter in 4 is set to Password, only the password can be set in this step.