Advanced Search
Search Results
521 total results found
Soffid Authenticator App
Password Manager Getting started
Password Manager Getting started
Break Glass
Soffid 4 reference guide
Soffid 4 reference guide
SQL Connector
Windows Connector
Zarafa Connector
Process types
Templates definition of process types
SCIM full examples
Resource data model & schema
The data model of the Soffid objects is mapped to JSON objects to enable the data transport between client and server.
ESSO Manuals
Documentation about Windows user access, Linux user access and Admin access
ESSO Configuring Rules for Single Sign On
ESSO Scripting Language
Soffid BPM pages
Soffid BPM pages
User management steps
Define the user management steps
Permissions management steps
Define the Process management steps
Account reservation steps
Define the account reservation steps
Connectors Examples
Configuration
Examples
Self service portal examples
Step 4. Register additional resources (Optional)
Step 5. Account management
The account management step shows you how to manage the accounts to change the type, how to locate the accounts on the password vault and how to assign a password. To comply this step the discovery process must be completed.
Step 6. Passwords rotation
The passwords rotation reduces the vulnerability to password-based attacks. Soffid allows you to limit the password lifespan and force you to change it.
Step 7. Just in time privileges
expire-session
Definition This operation allows to close a session created by either validate-credentials or parse-saml-response. If you want to get real global logout, this method invocation is not enough. You should also use the generate-saml-logout-request method. ...
generate-saml-request
Definition This operation allows to generate a SAML request to an external IDP. URL <console-domain>/webservice/federation/rest/generate-saml-request Method POST Headers Accept = “application/json” Content-Type = “applic...
parse-saml-response
Definition This operation allows to validate a SAML response generated by another external IDP that support SAML protocol. URL <console-domain>/webservice/federation/rest/parse-saml-response Method POST Headers Accept = “appl...
generate-saml-logout-request
Definition This operation allows to generate a SAML logout request to be sent to a IdP supporting SAML Global Logout, including Soffid IdP. URL <console-domain>/webservice/federation/rest/generate-saml-logout-request Method ...
Server certificate management
There are two options for certificate management 1. The easiest, fast and cheap one: Do not create any public or private key, nor enter any certificate chain. At first start up, Soffid Identity Provider will generate a new public/private key pair. Using thi...
Soffid IdP as an identity broker
Introduction An Identity Broker is often part of a a Single Sign-On Architecture as an an intermediary service that connects multiple Service Providers with different Identity Provider (IDP)s. Soffid IdP can act as an identity broker. This means that So...
External oAuth / OpenID Identity Providers
Introduction Soffid federation can be composed by a mix of SAML and oAuth / OpenID-connect servers. In such a scenario, Soffid IdP is able to let users be identified by oAuth servers like Linked-in, Google or Facebook, perform all the provision tasks requir...
Customizable CSV file (CSV Connector type)
Introduction Description The CSV connector type allows users to load a collection of data stored into a plain CSV file. In the following page, the process to complete the CSV connector setup will be explained. To begin with, address to the quick start sec...
Invoker interface
Any agent, trigger or mapping can use the invoker method for the ActiveDirectory agent. The invoker method is available in the dispatcherService class as well as the in the serverService. The invoker method is not specific of the Shell agent. Many other conne...
HOWTO SSL access to Active Directory
Table of Contents Introduction. Installing the Certificate Services. Configuring Automatic Certificate Request for Domain Controllers. Check for Issued Certificate. Import certificate. Introduction This howto will show you how to install the Certifi...
Invoker interface for Active Directory
Any agent, trigger or mapping can use the invoker method for the ActiveDirectory agent. The invoker method is available in the dispatcherService class. The invoker method is not specific of the Active Directory agent. Many other connectors support this method...
⏰ Getting started
Introduction Soffid ESSO is a full Enterprise Single Sign on solution, with some distinguishing features: Keeps track of users sessions active on the network. Automatically reconfigure user preferences and desktop behaviour according to whether or n...
ESSO Scripting Language
Visit the ESSO Scripting Language chapter.
Configuring terminal emulation SSO
Introduction To configure SSO on terminal emulations, an HLL API bridge has been built. This bridge allows direct communication with the terminal emulator in order to create accurate SSO rules that can be triggered based on the screen display. Next, you have...
ESSO Related configuration parameters
Introduction There are some configuration parameters that can be tuned on Soffid console. Parameter Value SSOServer Comma separated of synchronization servers the ESSO should connect to seycon.https.port TCP/IP synchronizatio...
ESSO Scripting Language
Introduction The scripting language used is a full ECMAScript interpreter. Nevertheless, it's not a Javascript interpreter as it's used on web browsers. It only has the core elements of ECMAScript (Objects, Arrays, String, etc.) and a set of objects and funct...
1.1. ESSO SendKeys syntax
SendKeys syntax The sendKeys function aims to perform as the user pressing keystrokes. Thus, the function SendKeys ("ABC") simulates to press those three letters. The keystrokes will be done independently of the application that generates them. Thus, it is p...
2. secretStore object
Introduction This object is always visible from any action, and provides access to the user's passwords and secrets. User passwords are always related to a system account. This is the object used to retrieve user and password in order to inject credentials i...
3. SystemInfo object
Introduction The SystemInfo object is always visible from any action, and provides access to information about the machine. Attributes os string Specifies the name of the operating system: Windows / Ubuntu oSVersion string ...
4. Window class
Introduction When an action is bound with a user interface application, it creates an object of class Window for each component at the XML descriptor with a ref-as attribute. Those components have the following methods: Methods getText return...