Using STA for Multifactor Authentication for CTE GuardPoints

Prerequisites

• Have a CipherTrust Manager set up with:

  • Client Profile enabled for Multifactor Authentication

  • Registration token

• Integrate with SafeNet Trusted Access by creating and managing your access controls in SafeNet Trusted Access.

Selecting the Proper Template

Note

Make sure that, in SafeNet Trusted Access, you choose the custom template: CTE_OIDC.

If the CTE_OIDC template is not available in your account:

1. Create an app using the Generic Template.

2. For the Integration Protocol, select OIDC.

3. Configure VALID REDIRECT URL as: http://127.0.0.1:5560/auth/callback.

   

   Note

   Port 5560 is the default CTE OIDC login port. If the CTE admin changes it through the voradmin mfa command, you must chang that value in the redirect URL.

Create an OIDC Connection with CipherTrust Manager

1. Log on to the CipherTrust Manager GUI as an administrator.

2. In the left pane, click Access Management > Connections.

3. In the Connections, click Add Connection.

4. Click OIDC and then click Next.

5. Provide a name for the connection and click Next.

6. Enter values for the configuration information.

   

   Note

   Refer to your Multifactor Authentication provider profile for the values:

   • URL of OIDC provider:
   Linux

   • For KeyCloak, select the URL of the OIDC provider

   Windows

   • For Thales SafeNet Trusted Access, select Well Known Configuration URL

   • For all other providers, select the URL of the OIDC provider

   • Client-ID as configured for the OIDC client

   • Client-Secret as shown for the OIDC client

7. Click Next and in the Add Products window, select CTE for product.

8. Click Add Connection.

For more on the SafeNet Trusted Access OIDC template, see OIDC applications.