topic RE: steps needed to set up SSO for decipher login in Product Forum

steps needed to set up SSO for decipher login

manavSingla — Tue, 15 Mar 2022 09:12:00 GMT

For SSO setup in Decipher 2.1, What will go In SAML URL field.

Also I want to know about Master Username and Master Password As Any username and any password can be set in configuration .

------------------------------
manav Singla
------------------------------

RE: steps needed to set up SSO for decipher login

PabloSarabia — Tue, 15 Mar 2022 11:41:00 GMT

Hi @manav Singla,

Here you have the documentation about the Single Sign-on authentication. Also have more documentation about the other configurations

https://bpdocs.blueprism.com/decipher-2-1/en-us/user-guide/configuration.htm?Highlight=saml

Hope this helps you, see you in the community.

Bye 🙂

------------------------------
Pablo Sarabia
Architect
Altamira Assets Management
Madrid
------------------------------

RE: steps needed to set up SSO for decipher login

manavSingla — Tue, 15 Mar 2022 12:02:00 GMT

Hi Pablo,

I had already referred to this documentation ,But I am still confused about SAML URL and from where to generate this.

Thanks,
Manav

------------------------------
manav Singla
------------------------------

RE: steps needed to set up SSO for decipher login

LukasRamasauskas — Fri, 13 May 2022 10:47:00 GMT

For the moment, we are stuck in the same step.
According to the Identity and Access MGMT colleagues, they need to get XML files about the application (Decipher) in order to complete/prepare setup in Active Directory / Azure AD.
Master user and Master pwd is a same mystery - currently pending official BP support response on wherefrom and how fetch/set these master records.

------------------------------
Lukas Ramasauskas
RPA Software Engineer
Swedbank AB
Europe/Vilnius
------------------------------

RE: steps needed to set up SSO for decipher login

Ben.Lyons1 — Fri, 13 May 2022 10:53:00 GMT

Hi Lukas,

Decipher does not currently support Active Directory (AD) integration as a form of single sign on. The other users in this post are discussing single sign on using a SAML authentication method, which is not the same thing as Active Directory management.

We are working on AD integration and it will be available in a future version.

If you need support setting up SAML authentication, please raise a support ticket and we'll be more than happy to assist.

Thanks

------------------------------
Ben Lyons
Senior Product Specialist - Decipher
Blue Prism
UK based
------------------------------

RE: steps needed to set up SSO for decipher login

til.minet — Fri, 13 May 2022 12:45:00 GMT

Hi Ben,

You're talking about "a future version" for AD integration. We rely heavily on the information on the roadmap that AD integration comes with Decipher 2.2. Our IT Security won't let us go into production with Decipher if we do not get AD integration up and running.

Can you please confirm that this is still planned for 2.2 and due to be released end of May 2022?

Best regards

Til

------------------------------
Til Minet
RPA Developer
EWE AG Germany
Oldenburg
------------------------------

RE: steps needed to set up SSO for decipher login

Ben.Lyons1 — Tue, 17 May 2022 09:02:00 GMT

Hi @Til Minet,

That's still the plan. We're just about to start QA, so we can't 100% confirm any features until this work is complete.

We of course want to ensure that the update meets our strict quality and security standards.

Thanks

------------------------------
Ben Lyons
Senior Product Specialist - Decipher
Blue Prism
UK based
------------------------------

RE: steps needed to set up SSO for decipher login

LukasRamasauskas — Thu, 26 May 2022 10:20:00 GMT

Hi,

Yes, we have a ticket open but looks like the BP support has not enough support from Decipher developers.

We performed wider investigation, and identified that application (Decipher) is not sending proper or at all any SAML request towards authentication site (in our case that's Azure AD); and moreover we have tired the reverse test - by providing the token back to Decipher from Azure AD with SAML SSO details, and Decipher is not accepting it (looks like Decipher endpoint URL is not processing SAML response). Looks like the mechanisms to send and accept SAML tokens in Decipher are not working or needs advanced configuration (but no details are provided by BP how to setup it as it may be underlying Web.config in Decipher Web Server installation). We tried many ways to guess and brute force proper config - unfortunately no luck.

Current state: waiting for Decipher IDP v2.2 release where integration with ActiveDir is promised (and fingers crossed that it will actually work and not like SAML SSO "integration").

//BR
//Lukas R.

------------------------------
Lukas Ramasauskas
RPA Software Engineer
Swedbank AB
Europe/Vilnius
------------------------------

RE: steps needed to set up SSO for decipher login

Ben.Lyons1 — Thu, 26 May 2022 10:32:00 GMT

Hi @LukasRamasauskas,

Decipher 2.1 does not support Active Directory integration via SAML or any other authentication mechanism. Decipher 2.2 is planned to have this functionality. It will afford users to connect it to their AD platform for access and password management.

SAML is an authentication mechanism which simplifies user authentication and supports a single sign on facility, here's some additional information from one of the many SAML platform providers https://www.onelogin.com/learn/saml

We appreciate this was not made as clear as it could be in the product documentation and we are looking to update our online help to better reflect this functionality.

Thanks

------------------------------
Ben Lyons
Senior Product Specialist - Decipher
Blue Prism
UK based
------------------------------

RE: steps needed to set up SSO for decipher login

til.minet — Wed, 01 Jun 2022 07:49:00 GMT

Hi @Ben.Lyons1,

Thanks for your reply! Can you give a rough estimate how long QA is supposed to take and what your ETA for 2.2 is?

Best regardfs
Til

------------------------------
Til Minet
RPA Developer
EWE AG Germany
Oldenburg
------------------------------

RE: steps needed to set up SSO for decipher login

Ben.Lyons1 — Wed, 01 Jun 2022 10:34:00 GMT

Hi Til,

I've just checked with Gary Burt, the Product Manager for Decipher IDP and he's provided the following update.

"The release timescale is ultimately determined by our QA process, as our goal is to ensure we address and remediate any issues identified before release. Our current schedule shows v2.2 being released in July. Should this timescale change, to allow an earlier release, then we will post details of the availability in this forum."

Thanks

------------------------------
Ben Lyons
Senior Product Specialist - Decipher
Blue Prism
UK based
------------------------------

RE: steps needed to set up SSO for decipher login

til.minet — Wed, 06 Jul 2022 10:51:00 GMT

Hey @Ben.Lyons1,

As I can see on the updated Product Roadmap the AD-integration has been dropped for 2.2 (and is not even mentioned for 2.3) and got replaced by SAML Authentication.

Can you give us updated information on what to expect in 2.2? We had hoped for the possibility of managing users and user rights depending on the AD, just like it is possible in Blue Prism main application. Sad to see it vanish.

Best regards
Til

------------------------------
Til Minet
RPA Developer
EWE AG Germany
Oldenburg
------------------------------

RE: steps needed to set up SSO for decipher login

Ben.Lyons1 — Tue, 12 Jul 2022 10:25:00 GMT

HI @til.minet,

Unfortunately I cannot offer any detail as to what has occurred in this instance.

I can say that we are still committed to delivering full AD Integration in Decipher IDP and if you would like to discuss the road map in more detail, please reach out to your account manager.

Thanks

------------------------------
Ben Lyons
Senior Product Specialist - Decipher
Blue Prism
UK based
------------------------------