Quiz on Configuring SSO using OneLogin

What protocol does OneLogin SSO use for authentication?

• LDAP

• OpenID Connect

• SAML

• OAuth

Answer explanation

OneLogin SSO primarily uses SAML (Security Assertion Markup Language) for authentication, allowing secure exchange of authentication and authorization data between parties, particularly between an identity provider and a service provider.

Which account is required to configure OneLogin for SSO?

• Azure account

• CCAI Platform user account

• OneLogin account

• Google Cloud account

Answer explanation

To configure OneLogin for SSO, a OneLogin account is essential. This account allows you to manage user access and authentication settings specific to OneLogin, making it the correct choice.

What must be ensured about the user invited to the OneLogin app?

• They must be an admin in OneLogin

• Their email must match the CCAI Platform user list

• They must have a Google account

• They must have a paid OneLogin subscription

Answer explanation

To invite a user to the OneLogin app, their email must match the CCAI Platform user list. This ensures proper access and integration, while the other options are not necessary requirements.

What is the first step in configuring OneLogin for SSO?

• Copy the X.509 Certificate

• Create a SAML application

• Set up the SSO page

• Invite a user to the OneLogin app

Answer explanation

The first step in configuring OneLogin for SSO is to invite a user to the OneLogin app. This establishes the initial user connection necessary for further configuration steps.

In the CCAI Platform instance configuration, what should be selected for the login method?

• OAuth

• API Key

• SAML

• Basic Authentication

Answer explanation

SAML is the correct choice for the login method in the CCAI Platform instance configuration as it provides a secure and standardized way to authenticate users through single sign-on (SSO), enhancing security and user experience.

What should be included in the Certificate field during SSO configuration?

• The SAML 2.0 Endpoint

• The issuer URL

• The X.509 certificate with specific headers

• Only the certificate name

Answer explanation

The X.509 certificate with specific headers is essential for SSO configuration as it ensures secure communication between the identity provider and the service provider, validating the authenticity of the SAML assertions.

What is the purpose of the Email field mapping in SSO configuration?

• To set up email notifications

• To define the email format

• To label the email name field on the sign-in page

• To map user roles

Answer explanation

The Email field mapping in SSO configuration is used to label the email name field on the sign-in page, ensuring users know where to enter their email address during the login process.

What action should be taken to verify SSO authentication?

• Create a new user

• Access the admin panel

• Click 'Login with company SSO'

• Log in with Google credentials

Answer explanation

To verify SSO authentication, you should click 'Login with company SSO'. This action initiates the SSO process, allowing you to authenticate using your company's credentials.

Which URL must be entered in the Single sign-on URL field?

• OneLogin Admin URL

• CCAI Platform URL

• Issuer URL

• SAML 2.0 Endpoint (HTTP)

Answer explanation

The Single sign-on URL field requires the SAML 2.0 Endpoint (HTTP) as it is the specific URL used for SAML authentication, allowing secure communication between the identity provider and the service provider.

What is the last step in configuring SSO for the CCAI Platform instance?

• Verify user permissions

• Click Save

• Log out of the admin panel

• Test the configuration

Answer explanation

The last step in configuring SSO for the CCAI Platform instance is to 'Click Save'. This action finalizes the configuration changes made, ensuring they are applied and active.