This section describes how to integrate Zimperium zConsole with RSA Cloud Authentication Service using Relying Party.

   
Configure RSA Cloud Authentication Service

Perform these steps to configure RSA Cloud Authentication Service using Relying Party.
Procedure

1. In the Cloud Administration Console, click Authentication Clients > Relying Parties > Add a Relying Party.
2. Click Add next to Service Provider SAML.
3. On the Basic Information page, provide a Name for the application, for example, ZimperiumRelying.
   
4. Click Next Step.
5. On the Authentication page, choose basic values for initial testing purposes:
   1. Choose SecurID manages all authentication.
   2. Set Primary Authentication Method to Password.
      
6. On the Connection Profile page, click Import Metadata and click Choose File. 
7. Import the client-prefix-ZimperiumZConsole_zimperium_com_saml_metadata.xml file that was previously downloaded from the Zimperium zConsole. When imported, the metadata file will configure all other necessary settings on the Connection Profile page.
8. In the Service Provider section, provide the following details:
   1. ACS URL: https://hostname.Zimperium.com/api/auth/saml/sp
   2. Service Provider Entity ID: Same as ACS URL.
      ACS URL and Entity ID are auto-populated when imported. The metadata file will configure all other necessary settings on the Connection Profile page.
      
9. Scroll down and click Show Advanced Configuration.
10. In the Identity Provider section:
    1. Add any Discriminator value to make the Entity ID unique.
    2. Copy and save the entire Entity ID value. It may be wider than the text box so be sure to highlight and copy it all. For Relying Party, the Identity Provider Entity ID will be a URL with the Discriminator at the end. The Entity ID will be used when configuring the Zimperium zConsole.
       
11. Click Save and Finish. 
12. Click Publish Changes.
    
    
13. On the Applications > My Applications page, click the Edit icon for Zimperium ZConsole and select Export Metadata from the drop-down menu. When prompted, save the exported metadata file to your computer. The default file name will be applicationName-idp-metadata.xml.
    

The configuration is complete.

Return to Zimperium zConsole - RSA Ready Implementation Guide.