> For AI agents: [llms.txt](https://docs.trustedauth.com/llms.txt) provides a Markdown index of this documentation.

# AppDynamics

AppDynamics is an application performance monitoring solution to provide real-time visibility and insight into IT environments (see <https://www.appdynamics.com/>). You can protect access to AppDynamics by integrating AppDynamics with Identity as a Service. Once integrated, users can use single sign-on to log in to their AppDynamics account through Identity as a Service.

note

This integration was tested using Identity as a Service version 5.14 and AppDynamics Controller build 20.11.0-1930 . Other versions of the AppDynamics Controller may require integration and configuration steps that differ from those documented in this procedure. For other versions of AppDynamics Controller, use this procedure as a starting point for integrating the AppDynamics Controller. In the event of other issues, contact <support@entrust.com> for assistance.

To integrate AppDynamics with Identity as a Service, you must do the following:

## Step 1: Copy the SAML Configuration from Identity as a Service

1. Log into your Identity as a Service administrator account.

2. Click Menu icon **>** **Security > Applications**. The **Applications** **Lists** page appears.

3. Under **SAML Cloud Integrations**, click **SAML Configuration**. The **SAML Configuration** dialog box appears.

   This dialog box contains information you need to configure your SAML application for Identity as a Service authentication.

4. Do one of the following:

   - Leave this dialog box open to reference later in this procedure.
   - Copy the Entity ID, Single Sign-on URL, and Single Logout URL to a text file and save it to reference later in this procedure.

note

Depending on the integration you are performing, you may not need all three of these SAML configuration values.

## Step 2: Export the signing certificate from Identity as a Service

1. Log in to your Identity as a Service administrator account.
2. Click Menu icon **>** **Security > Applications**. The **Applications List** page appears.
3. Under **SAML Cloud Integrations**, click **SAML Signing Certificates**. The **SAML** **Signing Certificates** page appears.
4. Click the download icon next to the certificate to export the certificate you want to import into your SAML service provider application. The **Export Certificate** dialog box appears.
5. If the certificate has been issued by a CA, do one of the following:
   - Click **Certificate** to export the self-signed certificate.
   - Click **Root CA Certificate** to export a certificate issued from a CA.
   - Click **Certificate Chain** to export the SAML signing certificate and its CA certificates.
6. Click **Export**.

## Step 3: Add AppDynamics to Identity as a Service

1. Log into your Identity as a Service administrator account.

2. Click Menu icon **>** **Security > Applications**. The **Applications** **Lists** page appears.

3. Click **Add**. The **Select an Application Template** page appears.

4. Do one of the following:

   - Select **SAML Cloud Integrations** from the search drop-down list and scroll to find the application you want to add to IDaaS.
   - In the **Search bar**, enter a search option to filter for the application you want to add to IDaaS.

5. Click **AppDynamics**. The **Add AppDynamics** page appears.

6. Enter an **Application Name**.

7. Enter an **Application Description**.

8. Optional. Add a custom application logo.

   1. Click Plus icon next to **Application Logo**. The **Upload Logo** dialog box appears.
   2. Click Upload icon to select an image file to upload.
   3. Browse to select your file and click **Open**. The **Upload Logo** dialog box reappears showing your selected image.
   4. If required, resize your image.
   5. Click **OK**.

9. Select the **Authentication Flow** that appears to users during login.

10. Click **Next**. The **General** page appears.

11. In the **Default** **Assertion Consumer Service URL** field, enter

    > <https://my_domain.saas.appdynamics.com/controller/saml-auth?accountName=my_domain>
    > **Example:** <https://mycompany2.saas.appdynamics.com/controller/saml-auth?accountName=mycompany>

12. In the **Service Provider Entity ID** field, enter

    > <https://my_domain.saas.appdynamics.com/controller/saml-auth?accountName=my_domain>
    > **Example:** <https://mycompany.saas.appdynamics.com/controller/saml-auth?accountName=my_domain>

13. In the **Single Logout Service URL** field, enter the AppDynamics home page URL:

    > <https://www.appdynamics.com>

14. Optional. Enter the **SAML Username Parameter Name** used to identity the user ID being requested for authentication. The user ID can then be passed as a parameter, for example, Username=jdoe.

15. Enter the **SAML Session Timeout** to the time when the SAML Assertion times out. The maximum is 720 minutes.

16. Enter the **Max Authentication Age (seconds)** to set the maximum amount of time that can elapse before a user is required to reauthenticate during a new login attempt. This applies for both SP-initiated and IDP-initiated login. Set this field to -1 to disable this feature.

17. From the **SAML NameID Attribute** drop-down list, select **UserID**.

18. From the **SAML Signing Certificate** the drop-down list, select the signing certificate.

19. Select **Sign Complete SAML Response**.

20. Optional: Select **Respond Immediately for Unsuccessful Responses** to return to the application immediately after a login failure, rather than allow user to try again with a different userID.

21. Deselect **Enable Go Back Button** if you do not want users to be able to go back to the AppDynamics login page to log in.

22. Select **Show Default Assertion Consumer URL Service in the My Profile**. When selected, the Default Assertion Consumer URL appears in a user's My Profile page in addition to relay states and Alternative Assertion Consumer URLs.

23. Optional. Add **Alternative Assertion Consumer Service URLs**, as follows:

    1. Click **Add**.
    2. Enter a **Name**.
    3. Enter a URL **Value**.
    4. Select **Show in My Profile** to display the Alternative Consumer Service URL in a user's My profile page.
    5. Optional. **Add an Application Logo**.
    6. Click **Add**.
    7. Repeat these steps to add more Alternative Assertion Consumer Service URLs.

24. Include the following user attributes in the SAML assertion, as follows:

    Add a **DisplayName** SAML attribute:

    1. Under **SAML Attributes**, click **Add**. The **SAML Attributes** dialog box appears.
    2. In the **Name** field enter **DisplayName**.
    3. Click **Add** next to **Value(s)**.
    4. In the **Values** field type **<** and select **<First Name>** add a space and type ** <** and select **<LastName>**.

    Add an **email** SAML attribute:

    1. Under **SAML Attributes**, click **Add**. The **SAML Attributes** dialog box appears.
    2. In the **Name** field enter **Email**.
    3. Click **Add** next to **Value(s)**.
    4. In the **Values** field type **<** and select **<email>** from the drop-down list.

    Add a **username** SAML attribute:

    1. Under **SAML Attributes**, click **Add**. The **SAML Attributes** dialog box appears.
    2. In the **Name** field enter **Username**.
    3. Click **Add** next to **Value(s)**.
    4. In the **Values** field type **<** and select ** <User ID>**.
    5. Click **Add** next to **Value(s)**.

25. Click **Submit**.

## Step 4: Add a resource rule

See [Create resource rules](/docs/authentication-and-security/create-and-manage-resource-rules.md).

## Step 5: Configure AppDynamics for Identity as a Service authentication

1. Log in to your AppDynamics tenant account as an administrator.
2. Click the settings icon and select **Administration** from the **Settings** menu. The **Administration** page appears.
3. Click the **Authentication Provider** tab. The **Authentication Provider** page appears.
4. In the **Login URL** field, enter the **Single Sign-On URL** you copied in _Step 1: Copy the SAML Configurations from Identity as a Service_.
5. For the **Login URL Method**, select **POST**.
6. In the **Logout URL** field, enter the **Single Logout URL** you copied in _Step 1: Copy the SAML Configurations from Identity as a Service_.
7. Click the edit icon next to **Identity Provider Certificate** and paste the contents of the certificate your downloaded in _Step 2: Export the signing certificate from Identity as a Service_.
8. In the **SAML Attribute Mappings** section, do the following:
   1. In the **Username Attribute** field, enter **Username**.
   2. In the **Display Name Attribute** field, enter **DisplayName**.
   3. In the **Email Attribute** field, enter **Email**.
9. Click **Save**.

## Step 6: Test the integration

### Testing Service Provider Login

1. Open a Web browser and enter the URL for your AppDynamics account. You are directed to Identity as a Service.
2. Enter your AppDynamics account **User ID** and click **Next**.
3. Respond to the second-factor authentication challenge. If you respond successfully, you are logged in to the AppDynamics **Home** page.

### Testing Identity as a Service redirect log in

1. Log in to your Identity as a Service account.
2. Go to your **My Profile** page if you are not already there.
3. Under **Applications**, click **AppDynamics**.
4. Respond to the second-factor authentication challenge. If you respond successfully, you are logged in to AppDynamics.