3.7 Creating a Basic SSO Connector Template

A connector for basic single sign-on uses HTML Forms to populate the authentication information. To create a custom connector for Basic SSO, you must define the HTML form for the desired application.

3.7.1 Basic SSO Requirements

Note the following requirements before you create a custom connector for Basic SSO:

  • The application or web service must support HTML Forms.

    For more information, see www.w3.org.

  • The connector supports user access to destination websites only through Chrome and Firefox web browsers running on a desktop or laptop computer. The connector works with the Basic SSO extension to securely collect, store, retrieve, and replay users’ credentials for their destination websites.

    The MobileAccess app supports the secure retrieval and replay of previously stored credentials for websites that users access through the landing page on supported mobile devices.

  • A user must install the Basic SSO extension in a supported browser one time on each desktop or laptop they use to access the Basic SSO websites.

    For Chrome, the extension is available for free from the Google Play Store. If it is not installed when the user accesses the application through CloudAccess, CloudAccess prompts the user to go to the Google Play Store and install it. The extension is added to the Chrome Extensions list, with the following permissions:

    • Access your data on all websites

    • Access your tabs and browsing activity

    For Firefox, the extension is available through Add-ons. The Firefox extension behaves the same way as the Chrome extension.

3.7.2 Planning for Basic SSO

Before you attempt to create the connector, you must collect information about the format of the HTML form on the login page of the web service or application. For example:

  • What is the domain URL for the web service or application?

  • What is the login page for the web service or application?

  • What is the form ID or name for the user name?

  • What is the form ID or name for the user password?

  • What input type is used for the form (button, image, string)?

NOTE:You can use a worksheet to organize the information. See Worksheet for Basic SSO Custom Connectors.

3.7.3 Creating a Basic SSO Connector Template for a Web Service

A Basic SSO connector template consists of multiple components. CloudAccess contains an interface that allows you to create the components in one place.

To create a connector template for Basic SSO:

  1. Log in as a CloudAccess administrator to the Access Connector Toolkit at:

    https://appliance_dns_name/css/toolkit
    
  2. Click New > Basic SSO.

    The connector Type is Basic SSO. The Type Name is Generic Basic SSO Connector.

  3. On the Template tab, complete the template properties:

    • The unique name for the template file (target name). This name cannot include spaces or special characters.

    • A brief description of the connector.

    • A 3-digit version number (ex: 1.0.0).

    • A custom graphic to use for the icon that represents the connector on the Admin page.

  4. (Conditional) If you need to specify a variable for the destination URL, under Settings, click New, then define the variable settings.

    For example, some websites require an assigned keyword or organization name for the URL assigned to your company’s account.

  5. Click the Forms tab and create the form for the Basic SSO connector.

    The Forms tab allows you to define the HTML form for the appropriate application and platform. You define the HTML form fields that are required to populate the form correctly. Use the information from w3.org to create the form.

    Sometimes the application’s HTML form is different for the desktop application or the mobile application. This means you must create multiple forms for the application. You can use the same fields for all three platforms or define a unique form for each platform.

  6. Click Save to save the new connector template.

  7. Proceed to Section 3.9, Exporting a Connector Template to finish creating the new connector.