You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: content/blog/configuring-sso-for-hpe-greenlake-central-private-cloud-enterprise-and-hpe-greenlake-glcp-using-okta.md
+23-25Lines changed: 23 additions & 25 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,6 +1,6 @@
1
1
---
2
-
title: Configuring Okta AD as the SAML IDP with HPE Greenlake Central (Private
3
-
Cloud Enterprise) and HPE GreenLake (GLP) using Okta
2
+
title: How to implement a single sign-on solution to authenticate users onto the
3
+
HPE GreenLake edge-to-cloud platform
4
4
date: 2023-11-29T10:08:49.979Z
5
5
featuredBlog: false
6
6
externalLink: ""
@@ -16,15 +16,13 @@ tags:
16
16
- Private Cloud Enterprise
17
17
- hpe-greenlake
18
18
---
19
-
Many enterprises today are looking to implement a single-sign on (SSO) solution that enables their users to easily access all of their cloud and web applications. A key requirement of these solutions is Active Directory integration, which makes it possible to connect cloud applications back to a single source of truth, Active Directory. HPE GreenLake Cloud Platform (GLCP) supports Single Sign On (SSO)
19
+
Enterprises looking to use HPE GreenLake for Private Cloud Enterprise can benefit from the use of SSO, as it has been integrated onto the HPE GreenLake edge-to-cloud platform, which supports single sign-on
20
20
21
-
HPE Greenlake Central for Private Cloud Enterprise has been integrated into the HPE GreenLake Cloud Platform (GLCP).
22
-
23
-
I will walk you through the process of configuring Okta AD to authenticate users into the HPE GreenLake Cloud Platform (HPE GLCP) and HPE GreenLake for Private Cloud Enterprise application using SAML IDP.
21
+
In this blog post, I will walk you through the process of configuring Okta AD to authenticate users into the HPE GreenLake for Private Cloud Enterprise application on the HPE GreenLake platform using SAML Identity Provider (IdP) for single sign-on.
24
22
25
23
### Before starting
26
24
27
-
Please review the [HPE GreenLake](https://support.hpe.com/hpesc/public/docDisplay?docId=a00120892en_us&page=GUID-D7192971-EF71-4304-B51E-548E7954E644.html) User Guide to understand how the SAML framework works in the context of Common Cloud Services for the HPE GreenLake Cloud Platform for HPE Greenlake Central (Private Cloud Enterprise) application.
25
+
Please review the [HPE GreenLake](https://support.hpe.com/hpesc/public/docDisplay?docId=a00120892en_us&page=GUID-D7192971-EF71-4304-B51E-548E7954E644.html) User Guide to understand how the SAML framework works in the context of Common Cloud Services for the HPE GreenLake edge-to-cloud platform for HPE GreenLake Private Cloud Enterprise application.
28
26
29
27
**Steps to be followed in Customer Okta:**
30
28
@@ -35,7 +33,7 @@ Please review the [HPE GreenLake](https://support.hpe.com/hpesc/public/docDispl
35
33
* Step 1: Create an Okta SAML application
36
34
* Step 2: Configure Sign On settings
37
35
* Step 3: Export the SAML 2.0 IdP metadata
38
-
* Step 4: Configure the SAML connection in HPE GreenLake Cloud Platform
36
+
* Step 4: Configure the SAML connection in HPE GreenLake edge-to-cloud platform
39
37
40
38
**Step 1: Create an Okta SAML application**
41
39
@@ -45,11 +43,11 @@ Please review the [HPE GreenLake](https://support.hpe.com/hpesc/public/docDispl
45
43
46
44

47
45
48
-
Provide a name for the SAML application which gets connected to HPE GreenLake Cloud Platform(GLCP)
46
+
Provide a name for the SAML application which gets connected to HPE GreenLake edge-to-cloud platform
49
47
50
48

51
49
52
-
**Step 2: How to configure Single Sign On settings**
50
+
**Step 2: How to configure single sign-on settings**
53
51
54
52
1. Enter the SAML information.
55
53
@@ -73,7 +71,7 @@ Provide a name for the SAML application which gets connected to HPE GreenLake Cl
73
71
74
72
See here for IdP attribute details: <https://support.hpe.com/hpesc/public/docDisplay?docId=a00120892en_us>
75
73
76
-
A new SAML attribute has been added “hpe_ccs_attribute” which tells HPE GreenLake and HPE Greenlake Central (Private Cloud Enterprise) the exact role/permissions for each user. The following describes how to format the attribute.
74
+
A new SAML attribute has been added “hpe_ccs_attribute” which tells HPE GreenLake edge-to-cloud platform and HPE GreenLake Private Cloud Enterprise application the exact role/permissions for each user. The following describes how to format the attribute.
@@ -83,7 +81,7 @@ Provide a name for the SAML application which gets connected to HPE GreenLake Cl
83
81
84
82

85
83
86
-
The **hpe_ccs_attribute** always starts with version1#. You must first configure the attributes for HPE GreenLake and To do so, enter the PCID for the account, followed by the HPE GreenLake application ID. This will always be **00000000-0000-0000-0000-000000000000**. Following this, enter the role name and ALL_SCOPES**.**
84
+
The **hpe_ccs_attribute** always starts with version1#. You must first configure the attributes for HPE GreenLake edge-to-cloud platform and To do so, enter the PCID for the account, followed by the HPE GreenLake application ID. This will always be **00000000-0000-0000-0000-000000000000**. Following this, enter the role name and ALL_SCOPES**.**
87
85
88
86
Example:
89
87
@@ -101,64 +99,64 @@ Click Next and Select “Internal App”, then Finish.
101
99
102
100
1. Click Next – Configure the Sign On settings
103
101
104
-
You will find two options are available: **View Setup Instructions** which steps you through the SAML configuration and **Identity Provider metadata**, which will produce an XML file that can be loaded into HPE GreenLake Cloud Platform (GLCP) application
102
+
You will find two options are available: **View Setup Instructions** which steps you through the SAML configuration and **Identity Provider metadata**, which will produce an XML file that can be loaded into HPE GreenLake edge-to-cloud platform application
105
103
106
104
Suggestion: Click **Identity Provider metadata** and save the XML data to a file.
107
105
108
106

109
107
2. Click Next.
110
108
3. Select Internal app, and Click Finish.
111
109
112
-
**Step 3.1 : Access to the SAML application and HPE Greenlake is determined by assigning only those members or group to the SAML application.**
110
+
**Step 3.1 : Access to the SAML application and HPE GreenLake edge-to-cloud platform is determined by assigning only those members or group to the SAML application.**
113
111
114
112

115
113
116
-
**Steps to be followed in HPE GreenLake Cloud Platform(GLCP)**
114
+
**Steps to be followed in HPE GreenLake edge-to-cloud platform**
1. Log into **HPE GreenLake Cloud Platform** and click Menu > Manage > Authentication and Click Set Up SAML Connection.
118
+
1. Log into HPE GreenLake edge-to-cloud platform and click Menu > Manage > Authentication and Click Set Up SAML Connection.
121
119
122
-
*Before you can add a new SAML configuration, you must have at least one user account with that domain already enabled in HPE GreenLake. Also, you must be logged into HPE GreenLake with an account from that domain in order to enable SSO for it.*
120
+
*Before you can add a new SAML configuration, you must have at least **one** user account with that **domain** already enabled in HPE GreenLake edge-to-cloud platform. Also, you must be logged into HPE GreenLake edge-to-cloud platform with an account from that domain in order to enable SSO for it.*
123
121
124
122

125
123
2. Type in the domain you want to enable SSO on:
126
124
127
125

128
126
3. Input the metadata from the step above.
129
127
130
-
While HPE GreenLake does support entering this information manually, it's recommended that you simply upload the XML metadata that was downloaded in the previous step. To do so, Select Metadata File, selecting the XML file. Then, click Next.
128
+
While HPE GreenLake edge-to-cloud platform does support entering this information manually, it's recommended that you simply upload the XML metadata that was downloaded in the previous step. To do so, Select Metadata File, selecting the XML file. Then, click Next.
131
129
132
130

133
131
4. Enter the SAML attributes to match what was entered in Okta. Set the idle timeout value as well.
134
132
135
133

136
134
5. Then click Next.
137
-
6. Create a recover user so that, in the event SSO fails, an admin will still be able to access the HPE GreenLake portal.
135
+
6. Create a recover user so that, in the event SSO fails, an admin will still be able to access the HPE GreenLake edge-to-cloud platform.
138
136
139
137

140
138
141
-
Congratulations! SSO will now be enabled for HPE GreenLake as well as the HPE GreenLake Cloud Platform (GLCP) application. Log out and on the HPE GreenLake home page, click **Sign in with SSO**.
139
+
Congratulations! SSO will now be enabled for HPE GreenLake edge-to-cloud platform as well as the HPE GreenLake Private Cloud Enterprise application. Log out and on the HPE GreenLake edge-to-cloud platform home page, click **Sign in with SSO**.
142
140
143
141
**Testing and troubleshooting:**
144
142
145
-
On the HPE GreenLake Cloud Platform home page, click **Sign In with SSO**.
143
+
On the HPE GreenLake edge-to-cloud platform home page, click **Sign In with SSO**.
146
144
147
145

148
146
149
147

150
148
151
-
Enter the SSO credentials. You will be redirected to Okta to authenticate. Once you successfully authenticate, you will be redirected back to HPE GreenLake. You can then click on the HPE GreenLake Cloud Platform (GLCP) application and be given access based on the configured role/permissions.
149
+
Enter the SSO credentials. You will be redirected to Okta to authenticate. Once you successfully authenticate, you will be redirected back to HPE GreenLake edge-to-cloud platform. You can then click on the HPE GreenLake Private Cloud Enterprise application and be given access based on the configured role/permissions.
152
150
153
151
**Additional notes:**
154
152
155
153
* There must be at least **one** verified user belonging to the **Domain** prior to configuration.
156
-
* In order to configure SSO, you must be logged into HPE GreenLake with a user from the domain.
154
+
* In order to configure SSO, you must be logged into the HPE GreenLake edge-to-cloud platform with a user from the domain.
157
155
* SSO user access is determined by the “role_name” attribute included in the SAML hpe_ccs_attribute provided by the IdP.
158
156
* For more troubleshooting: <https://support.hpe.com/hpesc/public/docDisplay?docId=a00120892en_us>
159
157
160
158
* Customer users should be given access to SAML application.
161
159
162
-
After authentication when clicking the HPE GreenLake for Private Cloud Enterprise application**,** if it leads to the below error**it will take 1 hour to sync**, if not customer should contact HPE administrator.
160
+
After authentication when clicking the HPE GreenLake edge-to-cloud platform for Private Cloud Enterprise application**,** if it leads to the below error, it will take 1 hr to sync. If it does not do so within that time period, the customer should contact their HPE administrator.
0 commit comments