Robot Manager SSO Capabilities for RDA
Hi Team,
Currently we have configured RM SSO authentication for RDA with OAuth 2.0 with SAML bearer and instead of Pega STS service we have configured with custom STS service.
STS is F5 in NAB.
Our F5 IdP environment where the SSO solution currently exists is in a “contain” state.
We are also looking to migrating the applications that currently exist there over to one of our strategic SSO platforms, AAD and myAuth (Ping Identity) in the coming months.
We would like to see what the options are for us to also move over Pega Robot SSO to one of these platforms.
Thanks and Regards,
Varun
Pegasystems Inc.
GB
Hi Varun,
The authentication was designed and tested with AD FS STS and with Pega STS. I believe your custom STS it is providing the same claims that these provide and that way you get it to work.
With Ping Identity it should be possible to do the same but you'll need to use Ping Federate WS-Trust STS https://docs.pingidentity.com/bundle/pingfederate-110/page/rdt1564002962693.html with STS OAuth integration https://docs.pingidentity.com/bundle/pingfederate-110/page/mmn1564002963991.html.
This might require some additional configuration but I believe this can work.
Regards,
Angel
National Australia Bank Ltd
AU
@Angel Hermira Thank you for the inputs, will check these options with our IDP team.