CyberArk Workforce Identity (formerly Idaptive) SSO/SAML Configuration

CyberArk Workforce Identity SSO/SAML and Manual User Sync

Prerequisite: Verify Domain in the Foxit Admin Console

1. Open Foxit Admin Console
2. Navigate to Settings > Directory Setting > Verify Domain / Domain Settings
3. You can verify domains in the following two methods:
• DNS Method – Copy a TXT record to your domain name system. (Recommended)
• Type -> TXT
• Host/Name -> @ or leave blank
• TXT Value -> (Copy>Paste from Foxit Admin Console under
• TTL -> 1 Hour
• HTTPS Method – Upload an HTML file to the root folder of your domain’s website.
• After uploading the HTML file or adding the TXT record, click Verify Domain.
• In the pop-up dialog box, select TXT Record or HTTPS correspondingly, enter the domain you want to verify in the Domain field, and click Verify domain.
• Then the domain will be added to the Verified Domains List, and you can view the verification status. The status of a domain may show Unverified. Verifying domains using DNS may take up to 72 hours for your domain to verify and DNS changes to take effect. Then you can click Verify in the Actions column to verify again.

To remove a domain from the list, click Remove in the Actions column. When a verified domain is removed, the users with that domain are no longer managed and won't appear on your managed account page

CyberArk Workforce Identity (formerly Idaptive) SSO/SAML Configuration

This article explains how to configure CyberArk Workforce Identity (formerly Idaptive) Single-Sign-On (SSO) with the Foxit Admin Console so that users can activate our solutions (Foxit PDF Editor, Foxit Sign, etc.) using your organization's SSO.

These instructions may vary depending on your environment. If you have specific settings, you may need to check those with your IdP admins, as Foxit only supports SSO, as this article states.

1. Sign up on CyberArk Workforce Identity

1.1 Go to https://www.cyberark.com/, Click Product → Access → Workforce Identity

 

1.2 Click Start a Free Trial

 

1.3 After registration, you will receive an email, including Idaptive Portal URL, admin username, and temporary password.

 

1.4 Login to Idaptive Portal URL and reset your password.

 

2. Add Web App

2.1 Click Apps → Web Apps

 

2.2 Click Add Web Apps

 

2.3 In the pop-up window, click Custom → find SAML and click Add

 

2.4 On the Add Web App screen, click Yes

 

2.5 In the following screen, input a Name and other desired settings for the new SAML App → click Save

 

2.6 Under the new app, Click Trust → select Service Provider Configuration -> Manual Configuration

• Enter the SP Entity ID of your Admin Console into the SP Entity ID / Issuer / Audience field of Workforce Identity
• Enter SP Assertion Consumer Service URL of Admin Console into the Assertion Consumer Service (ACS) URL field of Workforce Identity

Choose Sign Response or Assertion? > Assertion and click Save

 

 

2.7 Click SAML Response → Click Add

 

2.8 Add a new attribute with the name email and value LoginUser > Email

 

2.9 Click Save

 

3. Add Users

3.1 Click Core Services → Users → Add User

 

3.2 Fill in the required fields → Click Create User

 

4. Add Permissions

4.1 Click Apps → Web Apps → SAML

 

4.2 Click Permissions → Add

 

4.3 Click the user added before → Click Add

 

 

5. Complete SAML configuration

5.1 Click Apps → Web Apps → Identity Provider Configuration →

• Enter the IdP Entity ID / Issuer of Workforce Identity into the Identity provider Entity ID field of Admin Console,
• Enter Single Sign On URL of Workforce Identity into the Identity provider SSO URL field of Admin Console

Download the Signing Certificate → Enter the entire contents of the Signing Certificate in the Public x509 certificate field of Admin Console → Click Save

 

5.2 Click Save configuration in Admin Console

CyberArk Workforce Identity (formerly Idaptive) User Sync Configuration

1. Open your Idaptive Portal URL and note your account details

2. Login to the Admin Console to configure synchronization settings

3. Click Authorize → Click Sync Users

1. Open your Idaptive Portal URL and note your account details

2. Login to the Admin Console to configure synchronization settings

1. Copy the value of CyberArk Tenant URL to the Tenant URL field of Admin Console. Note: just the domain name part, such as aah4361.my .idaptive.app
2. Copy the value of Your Admin User Name to the Admin Email field of Admin Console
3. Copy the value of Customer ID to Customer ID in Admin Console
4. Copy the value of Your password to Admin Password in Admin Console

3. Click Authorize → Click Sync Users