SSO Mappings

SSO (Single Sign On) User to Cerberus Group Mapping

By default, all SSO users are assigned the same virtual directories and permissions. These defaults are configured within the SSO Configuration tab of the SSO Users page. However, if you wish to customize the directory and permission mappings for individual SSO users then you can do so by going to the User & Group Custom Mappings tab.

You can select individual SSO accounts and map them to Cerberus group accounts, or, you can map SSO group accounts to Cerberus group accounts. Configuring an SSO user to group mapping will override the Default Mapping Configuration mode for the mapped SSO user.

Creating a SSO User to Cerberus Group Mapping

Mappings between a SSO User and a Cerberus Group can be achieved by first selecting an SSO Configuration from the drop down at the top of the page. Then, click 'New' in the Single Sign On User To Cerberus Group Mapping box.

                                       Add A New SSO User to Cerberus Group Mapping Dialog

In the dialog box, select the SSO User you wish to assign to a group (or simply type the name of the SSO user in the edit box) and then select a Cerberus Group. Click the Add Mapping button and a mapping entry will be placed in the SSO User To Cerberus Group Mapping box to indicate the SSO user will now have the same constraints and virtual directory mappings as the selected Cerberus Group.

You can also follow the below process:

1. Navigate into 'SSO Users'
2. Select your SSO configuration from the drop down at the top of the page.
3. Select the 'User and Group Custom Mapping' tab
4. Find the SSO User to Cerberus group section, and select 'New'.
5. Now select the SSO based user on the left, to map to a Cerberus group on the right, as seen above.
6. When finished, click the 'Add Mapping' button in blue, then the blue diskette icon on the following page to save.

SSO Group to Cerberus Group Mapping

SSO Group to Cerberus Group Mapping

Customizing each individual SSO User to a Cerberus group can be a time-consuming task if you have many users, especially if you can divide up large groups of users into just a few groups.

Creating a SSO Group to Cerberus Group Mapping

Add A New SSO Group to Cerberus Group Mapping Dialog

In order make maintaining large numbers of users easier, you can use the SSO group to Cerberus group mapping capability. On the SSO Users page, you can map groups from your identity provider to Cerberus groups using the SSO Group To Cerberus Group Mapping box.

To begin this process, you'll want to do the following:

1. Navigate into 'SSO Users'
2. Select your SSO configuration from the drop down at the top of the page.
3. Select the 'User and Group Custom Mapping' tab
4. Find the SSO Group to Cerberus group section, and select 'New'.
5. Now select the SSO based group on the left, to map to a Cerberus group on the right, as seen above.
6. When finished, click the 'Add Mapping' button in blue, then the blue diskette icon on the following page to save.

When a SSO user logs into Cerberus, the server will check the SSO group memberships for that SSO user and see if there are any SSO group to Cerberus group mappings. If a mapping is found, the virtual directories for that Cerberus group will be added to the virtual root for the user. Only the virtual directories from the Cerberus groups are added to the user. No other constraints are transferred.

Note: The Default Group and Default Virtual Directory mappings are still applied to the user when SSO group to Cerberus group mappings are present, unlike SSO user to Cerberus user mappings.

Removing an SSO mapping

To remove a mapping, simply right-click on the mapped entry and select Delete Mapping. Then the 'Save' icon at the top right.