Configuring Authentication and SSO - ironstream_for_elastic - ironstream_for_splunk - ironstream_for_kafka - Ironstream_Hub - 1.3

To configure authentication, a request will need to be raised with your organization’s IT support team. Follow these steps:

1. Start the Ironstream Hub Portal. The portal will create the required SAML meta file but will then immediately shutdown because authentication is turned on and the MetaDataUrl has not been specified.
2. Locate and retrieve the SAML meta file, which is needed to give to your infrastructure team. It is named saml-meta-data.xml.
   • On Windows, you can find the file in C:\Program Files\Precisely\Ironstream Hub\auth.
   • On Linux, you can find the file in /opt/ihub/auth.
3. Open a support request with your IT support team with the following details:
   • Inform them that you want them to configure SSO authentication using SAML with the organization's identity provider.
   • The name of the machine on which the Ironstream Hub portal is installed.
   • A list of the users that you would like to have access to the Ironstream Hub Portal.
   • The Ironstream Hub Portal’s root URL, which will be of the this format: https://<MachineName>/.
   • Provide them the SAML meta data file that was obtained in the previous step. This contains useful configuration data, such as the assertion consumer service URL. The identity provider may allow the meta-data file to be uploaded by your support team.
   • Request the support team to give you the meta data URL once they have finished configuration and know what it is. Different identity providers may refer to this URL using different terminology. For example, in the Azure Active Directory configuration, this is known as the App Federation Metadata URL.
4. Once the IT Support team has completed configuration and has provided you with the meta data URL, update the MetaDataUrl property in the ihubmainportal.json configuration file.
5. Start the Ironstream Hub Portal service. If you navigate to https://<MachineName>/pipelines and you are not already logged on with your corporate ID, you will be redirected to your company’s login page.