SAS PCE for Kintone Application (SAML)
The Kintone application, which follows the Security Assertion Markup Language (SAML) protocol can be secured by integrating it with SafeNet Authentication Service Private Cloud Edition (SAS PCE).
This integration is achieved by using Keycloak as an Identity Provider (IdP), which allows configuring the Kintone application (client) using SAML protocol. In this integration, SAS PCE provides multi-factor authentication in the context of authentication requests received by the Keycloak IdP from the Kintone application. Keycloak also provides SSO capabilities.
This documentation enables you to integrate Kintone with SAS PCE for authentication.
In the Kintone application integration with SAS PCE, no return attributes can be passed when using the Keycloak IdP. The same is applicable for all the SAML applications.
The integration comprises the following components:
-
STA Hybrid Access Management Service Pack: Consists of Keycloak and SafeNet Keycloak Agent. Here, Keycloak acts as an identity provider (IdP).
-
SAS PCE: Provides Multi-factor authentication (MFA) to a standard application.
-
Kintone application: The application follows the SAML protocol.
Supported Use Cases
This Kintone integration with SAS PCE supports the service provider (SP)-initiated flow.
Authentication Flow
The image below illustrates the authentication process, which ensures secure access to Kintone.
Integration - Kintone with SAS PCE
Before you start integrating Kintone with SAS PCE, you need to complete specific prerequisites.
Integrating Kintone with SAS PCE is a three-step process: