Logon using AuthAnvil On Demand

Traverse supports single sign-on integration with AuthAnvil On Demand, a cloud-based identity and access management web service.

1. A user initially logs into AuthAnvil On Demand using multi-factor authentication, a strengthened method of user identification. This is the only time the user authenticates to access many different applications, hence the name 'single sign-on'.
2. Inside AuthAnvil On Demand the user is shown a page of single sign-on apps. This can include a single sign-on app for Traverse.
3. The user clicks any app's icon to immediately access that application. AuthAnvil On Demand manages the specific logon requirements for each app, including periodic password changes if necessary, without the user's involvement.

Prerequisites

• Access to AuthAnvil On Demand.
• Access to Traverse 9.4 or later.

Configuring Integration of Traverse and AuthAnvil On Demand

1. Login into AuthAnvil On Demand.
2. Select SSO Manager.
3. Click the add + icon to create a new single sign-on app.
4. Click the Application Configuration tab.
   • Change Image - Optionally upload an icon for your new application.
   • Application is Enabled - Check to enable this application.
   • Give your application a name - Enter a name for your new application.
   • Authentication Policy - Select an authentication policy.
5. Click the Protocol Setup tab.
   • Protocol Type - Select SAML IdP-init.
   • Reply to URL - Enter the URL <YourTraverseURL>/ssoLogon.jsp.
   • Accept all other default values.
6. Click the Permissions tab.
   • Click Add Groups to add the user groups that will have access to your new application.
7. Click the Signing and Encryption tab.
   • Copy the text of the signing certificate in the edit box to your clipboard.
   • Click Save Changes.
8. Logon to Traverse as a superuser.
9. Select Superuser > Global Configuration > Web Application.
   • Enable Single Sign-On - Check this option.
   • Paste the text of the signing certificate into the Enable Single Sign-On text box.
   • Click Save.
10. Logon to AuthAnvil On Demand as any user in a user group assigned the Traverse single sign-on app.
    • The new Traverse app displays on the user's My Apps page.
11. Click the Traverse single-sign-on app.
    • You are automatically logged into Traverse.