• Home
• App Integrations
• Single Sign-On Integrations
• IBM Watson AIOps Single Sign-On

IBM Watson AIOps Single Sign-On SSO

---

Single Sign-On (SSO) solution by miniOrange provides secure Single Sign-On access into IBM Watson AIOps using a single set of login credentials. You can log into IBM Watson AIOps using miniOrange credentials or Azure AD credentials or any of your existing identity providers. With miniOrange SSO services, along with IBM Watson AIOps you can also login into other On-Premise and Cloud Applications using your existing Identity Providers/User Store (Azure Active Directory, Okta, Ping) credentials . Follow the given setup guide to integrate SAML SSO for your IBM Watson AIOps account.

miniOrange and IBM Watson AIOps Single Sign-On (SSO) integration supports the following features:

• SP Initiated Single Sign-On (SSO)
• IdP Initiated Single Sign-On (SSO)

Follow the Step-by-Step Guide given below for IBM Watson AIOps Single Sign-On (SSO)

1. Configure IBM Watson AIOps in miniOrange

• Login into miniOrange Admin Console.
• Go to Apps and click on Add Application button.



• In Choose Application, select SAML/WS-FED from the application type dropdown.



• Search for IBM Watson AIOps in the list, if you don't find IBM Watson AIOps in the list then, search for custom and you can set up your application in Custom SAML App.

• Enter the SP Entity ID or Issuer : available in Step 2
• Enter the ACS URL : available in Step 2
• Click on Next to proceed further.



• In the Attribute Mapping tab configure the following attributes as shown in the image below.



• To upload respective app logo for a Custom SAML App, click on Upload Logo tab.



• Click on Save.

To get miniOrange metadata details in order to configure IBM Watson AIOps :

• Go to Apps >> Applications.
• Search for your app and click on the icon ' ' in Actions menu against your app.
• Click on Metadata to get metadata details, which will be required later. Click on Show SSO Link to see the IDP initiated SSO link for IBM Watson AIOps.



• Here you will see 2 options, if you are setting up miniOrange as IDP copy the metadata details related to miniOrange, if you required to be authenticated via external IDP's (Okta, Microsoft Entra ID, Active Directory, ADFS, OneLogin, Google Workspace) you can get metadata from the 2nd Section as shown below.



• Click on the Download Metadata button to download the metadata.xml file which you will require in Step 2.

2. Configure SSO in IBM Watson AIOps

Prerequisites:

You must configure a fully qualified domain name (FQDN) for accessing your cluster.

Note - If you are configuring SSO using SAML, you need to manually register the IdP by using Identity provider APIs in the following scenarios:

• If you are upgrading foundational services version to 3.12.0 version or the later foundational services versions and if you do not have the IdP registration.
• If you are installing foundational services version 3.12.0 or later for the first time.
• From foundational services version 3.12.0 or later, IdP registration is required regardless SAML has dependency on LDAP or not.

SSO configuration:

• Enable SAML.
• Export the metadata file of IBM Cloud Pak for Watson AIOps to your enterprise SAML server. After you complete this task, a metadata file is downloaded.
• Import the metadata file sent by your enterprise SAML server.
• Verify whether SAML was successfully configured.

3. Test SSO Configuration

Test SSO login to your IBM Watson AIOps account with miniOrange IdP:

Using SP Initiated Login

• Go to your IBM Watson AIOps URL, here you will be either asked to enter the username or click on the SSO link which will redirect you to miniOrange IdP Sign On Page.



• Enter your miniOrange login credential and click on Login. You will be automatically logged in to your IBM Watson AIOps account.

Using IDP Initiated Login

• Login to miniOrange IdP using your credentials.



• On the Dashboard, click on IBM Watson AIOps application which you have added, to verify SSO configuration.





Not able to configure or test SSO?


Contact us or email us at idpsupport@xecurify.com and we'll help you setting it up in no time.

External References

• Single Sign On (SSO)
• SAML Single Sign On Solutions