Skip to content

Commit e9d7125

Browse files
committed
Update Blog “configuring-sso-for-hpe-greenlake-central-private-cloud-enterprise-and-hpe-greenlake-glcp-using-okta”
1 parent 7c39e0d commit e9d7125

File tree

1 file changed

+23
-25
lines changed

1 file changed

+23
-25
lines changed

content/blog/configuring-sso-for-hpe-greenlake-central-private-cloud-enterprise-and-hpe-greenlake-glcp-using-okta.md

Lines changed: 23 additions & 25 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
2-
title: Configuring Okta AD as the SAML IDP with HPE Greenlake Central (Private
3-
Cloud Enterprise) and HPE GreenLake (GLP) using Okta
2+
title: How to implement a single sign-on solution to authenticate users onto the
3+
HPE GreenLake edge-to-cloud platform
44
date: 2023-11-29T10:08:49.979Z
55
featuredBlog: false
66
externalLink: ""
@@ -16,15 +16,13 @@ tags:
1616
- Private Cloud Enterprise
1717
- hpe-greenlake
1818
---
19-
Many enterprises today are looking to implement a single-sign on (SSO) solution that enables their users to easily access all of their cloud and web applications. A key requirement of these solutions is Active Directory integration, which makes it possible to connect cloud applications back to a single source of truth, Active Directory. HPE GreenLake Cloud Platform (GLCP) supports Single Sign On (SSO)
19+
Enterprises looking to use HPE GreenLake for Private Cloud Enterprise can benefit from the use of SSO, as it has been integrated onto the HPE GreenLake edge-to-cloud platform, which supports single sign-on
2020

21-
HPE Greenlake Central for Private Cloud Enterprise has been integrated into the HPE GreenLake Cloud Platform (GLCP). 
22-
23-
I will walk you through the process of configuring Okta AD to authenticate users into the HPE GreenLake Cloud Platform (HPE GLCP) and HPE GreenLake for Private Cloud Enterprise application using SAML IDP.
21+
In this blog post, I will walk you through the process of configuring Okta AD to authenticate users into the HPE GreenLake for Private Cloud Enterprise application on the HPE GreenLake platform using SAML Identity Provider (IdP) for single sign-on.
2422

2523
### Before starting
2624

27-
Please review the [HPE GreenLake](https://support.hpe.com/hpesc/public/docDisplay?docId=a00120892en_us&page=GUID-D7192971-EF71-4304-B51E-548E7954E644.html) User Guide to understand how the SAML framework works in the context of Common Cloud Services for the HPE GreenLake Cloud Platform for HPE Greenlake Central (Private Cloud Enterprise) application.
25+
Please review the [HPE GreenLake](https://support.hpe.com/hpesc/public/docDisplay?docId=a00120892en_us&page=GUID-D7192971-EF71-4304-B51E-548E7954E644.html) User Guide to understand how the SAML framework works in the context of Common Cloud Services for the HPE GreenLake edge-to-cloud platform for HPE GreenLake Private Cloud Enterprise application .
2826

2927
**Steps to be followed in Customer Okta:**
3028

@@ -35,7 +33,7 @@ Please review the [HPE GreenLake](https://support.hpe.com/hpesc/public/docDispl
3533
* Step 1: Create an Okta SAML application
3634
* Step 2: Configure Sign On settings
3735
* Step 3: Export the SAML 2.0 IdP metadata
38-
* Step 4: Configure the SAML connection in HPE GreenLake Cloud Platform
36+
* Step 4: Configure the SAML connection in HPE GreenLake edge-to-cloud platform
3937

4038
**Step 1: Create an Okta SAML application**
4139

@@ -45,11 +43,11 @@ Please review the [HPE GreenLake](https://support.hpe.com/hpesc/public/docDispl
4543

4644
![](/img/ws-image0.png)
4745

48-
Provide a name for the SAML application which gets connected to HPE GreenLake Cloud Platform(GLCP)
46+
Provide a name for the SAML application which gets connected to HPE GreenLake edge-to-cloud platform
4947

5048
![](/img/customer_saml_app.jpg)
5149

52-
**Step 2: How to configure Single Sign On settings**
50+
**Step 2: How to configure single sign-on settings**
5351

5452
1. Enter the SAML information.
5553

@@ -73,7 +71,7 @@ Provide a name for the SAML application which gets connected to HPE GreenLake Cl
7371

7472
See here for IdP attribute details: <https://support.hpe.com/hpesc/public/docDisplay?docId=a00120892en_us>
7573

76-
A new SAML attribute has been added “hpe_ccs_attribute” which tells HPE GreenLake and HPE Greenlake Central (Private Cloud Enterprisethe exact role/permissions for each user. The following describes how to format the attribute.
74+
A new SAML attribute has been added “hpe_ccs_attribute” which tells HPE GreenLake edge-to-cloud platform and HPE GreenLake Private Cloud Enterprise application the exact role/permissions for each user. The following describes how to format the attribute.
7775

7876
Format: {version}#{pcid}:{app id}:{role_name}:{ALL_SCOPES}
7977

@@ -83,7 +81,7 @@ Provide a name for the SAML application which gets connected to HPE GreenLake Cl
8381

8482
![](/img/glp_role_name.jpg)
8583

86-
The **hpe_ccs_attribute** always starts with version1#. You must first configure the attributes for HPE GreenLake and To do so, enter the PCID for the account, followed by the HPE GreenLake application ID. This will always be **00000000-0000-0000-0000-000000000000**. Following this, enter the role name and ALL_SCOPES**.** 
84+
The **hpe_ccs_attribute** always starts with version1#. You must first configure the attributes for HPE GreenLake edge-to-cloud platform and To do so, enter the PCID for the account, followed by the HPE GreenLake application ID. This will always be **00000000-0000-0000-0000-000000000000**. Following this, enter the role name and ALL_SCOPES**.** 
8785

8886
Example:
8987

@@ -101,64 +99,64 @@ Click Next and Select “Internal App”, then Finish.
10199

102100
1. Click Next – Configure the Sign On settings
103101

104-
You will find two options are available: **View Setup Instructions** which steps you through the SAML configuration and **Identity Provider metadata**, which will produce an XML file that can be loaded into HPE GreenLake Cloud Platform (GLCP) application
102+
You will find two options are available: **View Setup Instructions** which steps you through the SAML configuration and **Identity Provider metadata**, which will produce an XML file that can be loaded into HPE GreenLake edge-to-cloud platform application
105103

106104
Suggestion: Click **Identity Provider metadata** and save the XML data to a file.
107105

108106
![](/img/ws-image9.png)
109107
2. Click Next.
110108
3. Select Internal app, and Click Finish.
111109

112-
**Step 3.1 : Access to the SAML application and HPE Greenlake is determined by assigning only those members or group to the SAML application.**
110+
**Step 3.1 : Access to the SAML application and HPE GreenLake edge-to-cloud platform is determined by assigning only those members or group to the SAML application.**
113111

114112
![](/img/customer-user-assignment-to-saml.jpg)
115113

116-
**Steps to be followed in HPE GreenLake Cloud Platform(GLCP)**
114+
**Steps to be followed in HPE GreenLake edge-to-cloud platform**
117115

118-
** Step 4: Create SAML Authorization Profile in HPE GreenLake Cloud Platform**
116+
**Step 4: Create SAML Authorization Profile in HPE GreenLake edge-to-cloud platform**
119117

120-
1. Log into **HPE GreenLake Cloud Platform** and click Menu > Manage > Authentication and Click Set Up SAML Connection.
118+
1. Log into HPE GreenLake edge-to-cloud platform and click Menu > Manage > Authentication and Click Set Up SAML Connection.
121119

122-
*Before you can add a new SAML configuration, you must have at least one user account with that domain already enabled in HPE GreenLake. Also, you must be logged into HPE GreenLake with an account from that domain in order to enable SSO for it.*
120+
*Before you can add a new SAML configuration, you must have at least **one** user account with that **domain** already enabled in HPE GreenLake edge-to-cloud platform. Also, you must be logged into HPE GreenLake edge-to-cloud platform with an account from that domain in order to enable SSO for it.*
123121

124122
![](/img/ws-image10.png)
125123
2. Type in the domain you want to enable SSO on:
126124

127125
![](/img/glp_domain.jpg)
128126
3. Input the metadata from the step above.
129127

130-
While HPE GreenLake does support entering this information manually, it's recommended that you simply upload the XML metadata that was downloaded in the previous step. To do so, Select Metadata File, selecting the XML file. Then, click Next.
128+
While HPE GreenLake edge-to-cloud platform does support entering this information manually, it's recommended that you simply upload the XML metadata that was downloaded in the previous step. To do so, Select Metadata File, selecting the XML file. Then, click Next.
131129

132130
![](/img/ws-image12.png)
133131
4. Enter the SAML attributes to match what was entered in Okta. Set the idle timeout value as well.
134132

135133
![](/img/config_setting_sso_appjpg.jpg)
136134
5. Then click Next.
137-
6. Create a recover user so that, in the event SSO fails, an admin will still be able to access the HPE GreenLake portal.
135+
6. Create a recover user so that, in the event SSO fails, an admin will still be able to access the HPE GreenLake edge-to-cloud platform.
138136

139137
![](/img/recovery_user.jpg)
140138

141-
Congratulations! SSO will now be enabled for HPE GreenLake as well as the HPE GreenLake Cloud Platform (GLCP) application. Log out and on the HPE GreenLake home page, click **Sign in with SSO**.
139+
Congratulations! SSO will now be enabled for HPE GreenLake edge-to-cloud platform as well as the HPE GreenLake Private Cloud Enterprise application. Log out and on the HPE GreenLake edge-to-cloud platform home page, click **Sign in with SSO**.
142140

143141
**Testing and troubleshooting:**
144142

145-
On the HPE GreenLake Cloud Platform home page, click **Sign In with SSO**.
143+
On the HPE GreenLake edge-to-cloud platform home page, click **Sign In with SSO**.
146144

147145
![](/img/ws-image15.png)
148146

149147
![](/img/hpe-greenlake-sso-page.jpg)
150148

151-
Enter the SSO credentials. You will be redirected to Okta to authenticate. Once you successfully authenticate, you will be redirected back to HPE GreenLake. You can then click on the HPE GreenLake Cloud Platform (GLCP) application and be given access based on the configured role/permissions.
149+
Enter the SSO credentials. You will be redirected to Okta to authenticate. Once you successfully authenticate, you will be redirected back to HPE GreenLake edge-to-cloud platform. You can then click on the HPE GreenLake Private Cloud Enterprise application and be given access based on the configured role/permissions.
152150

153151
**Additional notes:**
154152

155153
* There must be at least **one** verified user belonging to the **Domain** prior to configuration.
156-
* In order to configure SSO, you must be logged into HPE GreenLake with a user from the domain.
154+
* In order to configure SSO, you must be logged into the HPE GreenLake edge-to-cloud platform with a user from the domain.
157155
* SSO user access is determined by the “role_name” attribute included in the SAML hpe_ccs_attribute provided by the IdP.
158156
* For more troubleshooting: <https://support.hpe.com/hpesc/public/docDisplay?docId=a00120892en_us>
159157

160158
* Customer users should be given access to SAML application.
161159

162-
After authentication when clicking the HPE GreenLake for Private Cloud Enterprise application**,** if it leads to the below error **it will take 1 hour to sync**, if not customer should contact HPE administrator. 
160+
After authentication when clicking the HPE GreenLake edge-to-cloud platform for Private Cloud Enterprise application**,** if it leads to the below error, it will take 1 hr to sync. If it does not do so within that time period, the customer should contact their HPE administrator. 
163161

164162
![](/img/user_sync.jpg)

0 commit comments

Comments
 (0)