An administrator logs in to System Manager with a user profile that includes Security Admin permissions.

The admin user has full access to all functions in System Manager.

The administrator goes to the SAML tab under Access Management.

An administrator configures communications with the Identity Provider (IdP). An IdP is an external system used to request credentials from a user and determine if the user is successfully authenticated. To configure communications with the storage array, the administrator downloads the IdP metadata file from the IdP system, and then uses System Manager to upload the file to the storage array.

An administrator establishes a trust relationship between the Service Provider and the IdP. A Service Provider controls user authorization; in this case, the controller in the storage array acts as the Service Provider. To configure communications, the administrator uses System Manager to export a Service Provider metadata file for each controller. From the IdP system, the administrator then imports those metadata files to the IdP.

Administrators should also make sure that the IdP supports the ability to return a Name ID on authentication.

The administrator maps the storage array's roles to user attributes defined in the IdP. To do this, the administrator uses System Manager to create the mappings.

The administrator tests the SSO login to the IdP URL. This test ensures the storage array and IdP can communicate.

Once SAML is enabled, you cannot disable it through the user interface, nor can you edit the IdP settings. If you need to disable or edit the SAML configuration, contact Technical Support for assistance.

From System Manager, the administrator enables SAML for the storage array.

Users log in to the system with their SSO credentials.