SAML Setup Guide for the iGrafx Identity Solution

What is SAML2?

SAML stands for Security Assertion Markup Language and is used to provide Single-Sign-On (SSO) services to end users. It is used as a data exchange format between Service Providers (web applications that require their users to be authenticated) and Identity Providers (web applications that provide the required authentication). The iGrafx Identify solution acts as a Service Provider (SP) in this scenario, while your Azure AD, ADFS server or Okta instance acts as an Identity Provider (IDP).

SAML Flow with the iGrafx Identity Solution

SAML+SSO+Flow+(Identity+Provider+and+Service+Provider)_OAuth.png

Requirements

SAML 2.0 compatible Identity Provider
NameID format is email address

Identity Provider Guides

Microsoft Entra ID

Okta

ADFS

General Basic SAML configuration

You will receive the Tenant ID from your iGrafx Support team.

For Europe/EMEA

Identifier (Entity ID of the Service Provider): https://id.igrafxcloud.eu/realms/igrafx
The specific Reply URL for your iGrafx Process360 Live will be provided to you by iGrafx
ACS/Reply URL: https://id.igrafxcloud.eu/realms/igrafx/broker/YourTenant-idp-1/endpoint
Sign on URL: https://YOUR_SUBDOMAIN.igrafxcloud.com

Rest of the World/NA

Identifier (Entity ID of the Service Provider): https://id.igrafxcloud.com/realms/igrafx
The specific Reply URL for your iGrafx Process360 Live will be provided to you by iGrafx
ACS/Reply URL: https://id.igrafxcloud.com/realms/igrafx/broker/YourTenant-idp-1/endpoint
Sign on URL: https://YOUR_SUBDOMAIN.igrafxcloud.com

Identity Provider Guides

You cannot use Single Sign on with your iGrafx Desktop client (Flowcharter Product).

To connect with your Process Design app, use the API authentication method.