Search Results :

×

Steps to setup Secure Browser SSO Apps

Steps to setup Secure Browser SSO Apps


miniOrange supports Single Sign-on into your apps, to securely login for admins and users. miniOrange supports several different protocols for your applications, such as SAML, WS-FED, OAuth, OIDC, JWT, RADIUS, etc. Using Single Sign-on, users can use one set of credentials to login to multiple applications. This improves security, as it reduces avenues for phishing attacks, and also improves access to your application.

For web applications that do not provide support for federated single sign-on, miniOrange provides Secure Single Sign-on browser extension for SSO. Here, it is enabled on an application, where end-users see an icon on their home pages and browsers, through which users can set and update their credentials. ( In the secure store for that application only). miniOrange supports all browser extensions:

  • miniOrange Secure Browser Extension for SSO supports all popular web browsers like Chrome, Firefox, Safari, Internet Explorer and Microsoft Edge.
  • Browser extension provides a secure driven post to the application login page, signing in the user automatically on their behalf. The Extension does not store the credentials anywhere, and they are discarded once the user has signed into the application.
  • Users' credentials are stored in an encrypted format by using AES encryption, with the combination of a customer-specific private key. When a user clicks the application icon, miniOrange securely posts the username/password to the app login page over SSL and the user is automatically logged in.

1. Configure app in miniOrange

  • Login to the Admin Console.
  • Go to Apps >> Add Application
  • Browser 1 Add Application
  • Click on the Browser Extension/Form Post tab. And select the App from the pre-defined apps list.
  • Browser Extension form post
  • If your app is not on the list, follow Create Custom App in miniOrange steps given below, else skip to Activate the App.

2. Create Custom App in miniOrange (Optional)

  • Click on Add Custom App
  • Add custom Browser SSO App
  • Configure your app. Add application name and Login page URL. Select Type as SIMPLE_LOGIN. (Refer the table below formore information)
  • App Type Description
    SIMPLE LOGIN When its a Simple form with Username, password and a button to Login
    LOGIN_WITH_DOMAIN When along with username and password, there is another field that requires input (constant like account id or domain)
    LOGIN_AFTER_CLICK When the login form loads after a button click only.
    LOGIN_SECOND_PAGE 1. When username and password are on separate pages[2 page form].

    2. When username and password are on separate pages and also have separate buttons on each page (Separate button means that they cant be identified with a common query).
    Submit Button Field :Query Format
    document.querySelector(username-query) == null ? document.querySelector(button-1 query); document.querySelector(password-query).parentElement.parentElement.parentElement.querySelector(button-2 query)

    For ex:-
    1. username-query :- Insert query selector of selecting username with unique attributes[id ,class, name , type]
    2. password-query :- Insert query selector of selecting password with unique attributes[id ,name , type]
    3. button-1 query, button-2 query :- insert query selector of selecting button with unique attributes[ class,name, type]
    LOGIN_WITH_PRE_CLICK When a click is required before submitting the form. E.g, Some checkbox needs to be clicked.
  • Add QuerySelectors for Username, Password and Sign-in/Login Button. (Click here to learn more about QuerySelectors. or reach out to us @ idpsupport@xecurify.com for help).
  • New app request FB
  • Your App is now added in the List.
  • Application added to list

3. Activate the App

  • Select your required application from the list
  • Application list
    App details Description
    Group Name Select Group name as default.(This will allow all your added groups to access this service)
    Policy Name Select Policy Name the same as your application name.
    Individual Login If each user has a different username and password for the app, admin should choose an Individual Login Account option, so that users can save their username and password from the user portal themselves.
    Shared Login If multiple users are allowed to access the app via the same credentials assigned by admin, admin should choose share Login Account option.
    default group
  • Select your login type and click on the Save button.

4. Configure Login Credentials

Individual Login (Added by User)
  • Go to the miniOrange dashboard and select User Dashboard from the right side menu.
  • User Dashboard
  • Scroll down on the same page under the Configure your Cloud Apps section and search for your app.
  • On your app icon, you will find a setting option. Click on it and select Configure.
  • Browser SSO Apps configuration
  • Enter your Username and Password in the popup.
  • save login credential Browser SSO Apps
  • Click on Save to securely store your credentials.
Shared Login (Added by Admin)
  • For a Shared login account, click on Select >> Add credentials to Application, in the action menu against your app.
  • Shared login credentails
  • Set the credentials and click Save.
  • Enter login credentials
  • Go to the miniOrange dashboard and select User Dashboard from the right side menu.
  • User Dashboard
  • Scroll down on the same page under the Configure your Cloud Apps section and search for your app.
  • Browser SSO Apps user dashboard

5. Download and Install Browser Extension.

  • Scroll up on the same page, under the SIGN-IN TO YOUR FAVORITE CLOUD APPS section and search for your app.
  • On your app icon, click on the download symbol.
  • Browser SSO Apps CLOUD apps
    For Chrome
    • You will be redirected to an Add extension page. Now, click on Add to Chrome.
    • Browser SSO Apps extention
    • Click on Add extension.
    • Browser SSO Apps add extention
    • Now, miniOrange extension is installed in your Chrome Browser.
    For Firefox
    • You will be prompted to download the miniOrange extension. Click on the Allow button.
    • Browser SSO Apps miniorange extension
    • Now, miniOrange extension is installed in your browser.
    • Browser SSO Apps installation
    For Safari
    • A pop up screen will appear asking to download miniOrange extension. Else, go to the download settings of safari.
    • Browser SSO Apps popup
    • Click on the miniOrange extension popup to download the extension.
    For Internet Explorer
    • A .zip will be download.
    • Extract the .zip file and open the readme.txt file.
    • Follow the instructions in the readme file to install the extension in Internet Explorer.
    • Restart the Internet Explorer browser

6. Login to your Application via Configured App.

  • Click on the configured app in your user-dashboard to Login to your application.
  • Browser SSO Apps user dashboard
  • You will be redirected to your Application's Login page.
  • Browser SSO Apps Login page
  • The miniOrange browser SSO extension will fill your login credentials and will log you in automatically.
  • Browser SSO Apps browser sso autofill

7. Embed this application link in your website/user portal.

  • Go to admin dashboard -> Apps -> search for your app.
  • Click on Select > > Show SSO Link,in the Action menu against your app.
  • Show SSO link
  • Copy the app link and paste it anywhere on your website - User portal/ Apps Dashboard /Menu, etc.
  • Browser SSO Apps dashboard
Hello there!

Need Help? We are right here!

support
Contact miniOrange Support
success

Thanks for your inquiry.

If you dont hear from us within 24 hours, please feel free to send a follow up email to info@xecurify.com