You must create an identity provider within the CIC Administration Portal which corresponds to the Single Sign-On (SSO) Identity Provider Server that will be used to authenticate in Guidewire BillingCenter.
To create an identity provider within the CIC Administration Portal:
- Log in to the CIC Administration Portal.
-
Navigate to Identity > Identity Providers.
The Identity Providers page is displayed.
-
Click Add Identity Provider.
The Add Identity Provider wizard is displayed.
- Type the name for the Identity Provider Client in the Identity Provider Name field.
- Type the entityID for your Identity Provider Server in the Entity Id field. See the Identity Provider Server documentation for details on finding this value.
- Type the metadata URL for your Identity Provider Server in the Metadata URL field. See the Identity Provider Server documentation for details on finding this value.
- Select RSA-SHA256 from the Minimum Assertion Signature Algorithm drop-down.
-
Click Next Step.
The Bindings page is displayed.
- Enable the Override authentication request binding option and select Redirect from the first Binding Type drop-down.
- Enable the Override assertion binding option and select Post from the second Binding Type drop-down.
-
Click Next Step.
The Claim Type Mapping page is displayed.
- Enter the required details for the identity provider you are adding. Ensure that the claim names match in the Service Provider Application of the selected Identity Provider Server.
-
Click Next Step.
The Email Domains page is displayed.
-
Enable the email domain(s) corresponding to the Single Sign-On (SSO) Identity
Provider Server that will be used to authenticate in Guidewire BillingCenter. If
the domain does not appear in the list, click the Add Email
Domain button to add the domain to the list.
Guidewire BillingCenter will use the selected email domain to route federation to a particular Single Sign-On (SSO) Identity Provider Server and within the Hyland CIC Platform.
-
Click Next Step.
The Settings page is displayed.
- Select Enabled.
-
Click Next Step.
The Review page is displayed.
-
Review the information displayed and click Add Identity
Provider.
The identity provider is added to the Identity Providers list.
- Create a new User Group in CIC whose name matches the SSO domain. For full details on how to create a User Group, see Configuring User Groups.