Configure the SAML 2.0 Integration for Duo

In Cortex XSOAR, go to
Settings
Integrations
Servers & Services
.
Search for
SAML 2.0
.
Click
Add instance
to configure a new integration.
Enter
https://
<cortexxsoarURL>
/saml
in the
Service Provider Entity ID
field.
Copy the
Metadata URL
from your application defined in Duo to the
IdP metadata URL
field in Cortex XSOAR.
Copy the
Single Sign-On URL
from your application defined in Duo to the
IdP SSO URL
field in Cortex XSOAR.
Download the public certificate from Duo and copy the contents of the file into the
IdP public certificate
field in Cortex XSOAR.

Enter your
IdP private key (pem format)
. If you do not have a private key, create a self signed certificate, using Steps 1 - 2.
Leave
Use system proxy settings
selected and select
Compress encode URL (ADFS)
.

Enter your URL
https://<cortexxsoarURL>
for the
Service Identifier (ADFS)
field. This field must match the
Entity ID
in Duo.
Copy the
Single Log-Out URL
from your application defined in Duo to the
IdP Single Logout URL
field in Cortex XSOAR.
Enter
https://
<cortexxsoarURL>
/saml-logout
in the Single Logout Service Endpoint field.
Click
Test
to validate.
Map Duo Groups to Cortex XSOAR Roles.