Generic SSO
Integrating a generic SAML IdP with Panther
Last updated
Integrating a generic SAML IdP with Panther
Last updated
Panther supports integrating with any SAML Identity Provider (IdP) to enable logging in to the Panther Console via SSO.
For more information on features, terminology, and limitations of SSO integrations with the Panther Console, see Identity & Access Integrations.
Integrate any SAML Identity Provider (IdP) with Panther in three easy steps:
Log in to the Panther Console.
Click the gear icon in the upper right. In the dropdown menu, click General.
Click the Identity & Access tab.
Keep this browser window open, as you will need the Audience and ACS URL values in the next steps.
Log in to the administrative console of your IdP.
Create a SAML application in your IdP with the following settings:
Audience: Enter the Audience you copied from the Panther Console in earlier steps of this documentation.
ACS Consumer URL: Enter the ACS URL you copied from the Panther Console in earlier steps of this documentation.
SAML Attribute Mapping:
PantherEmail: Map this field to user email.
PantherFirstName: Map this field to first name.
PantherLastName: Map this field to last name.
Grant access to the appropriate users
Copy the Issuer ID from your IdP and store it in a secure location. You will need this in the next steps.
This URL should be a publicly accessible XML document.
If your IdP lets you download the metadata XML file directly but does not provide a URL, download this file so you can upload it into Panther.
Navigate back to the SAML configuration you started earlier in this documentation.
Next to Enable SAML, set the toggle to ON.
In the Default Role field, choose the Panther role that your new users will be assigned by default when they first log in via SSO.
In the Identity Provider URL field, paste the Issuer URL that you obtained in the previous steps of this documentation.
If your IdP did not provide a file URL but did allow you to download the metadata XML file, upload it to Panther by clicking click here below the Identity Provider URL field.
Click Save Changes.
To test your setup, go to your Panther sign-in page and click Login with SSO.
For examples, see the OneLogin SSO and Okta SSO integration guides.
