> For AI agents: [llms.txt](https://docs.trustedauth.com/llms.txt) provides a Markdown index of this documentation. # Sumo Logic Sumo Logic provides cloud monitoring, log management, Cloud SIEM tools, and real-time insights for Web and SaaS-based apps (see ). This integration provides instructions to integrate Sumo Logic with Identity as a Service. Once integrated, users can use single sign-on to log in to their Sumo Logic account using Identity as a Service note This integration was tested using Identity as a Service version 5.16 and Sumo Logic March 2021. Other versions of Sumo Logic may require integration and configuration steps that differ from those documented in this procedure. For other versions of Sumo Logic, use this procedure as a starting point for integrating Sumo Logic. In the event of other issues, contact for assistance. ## Prerequisites Before you begin, you must create an organization URL and a subdomain in Sumo Logic. See the following documentation for more information: To integrate Sumo Logic with Identity as a Service, you must do the following ## Step 1: Create a SAML signing certificate in Identity as a Service Identity as a Service provides a default self-signed certificate. You can also create your own certificate. This might be necessary if your certificate is about to expire or you want to create a certificate and replace the self-signed certificate with a certificate signed by a Certificate Authority (CA). 1. Log in to your Identity as a Service administrator account. 2. Click Menu icon **>** **Security > Applications**. The **Applications List** page appears. 3. Under **SAML Cloud Integrations**, click **SAML Signing Certificates**. The **SAML** **Signing Certificates** page appears. 4. Click Plus icon. The **Create Signing Certificate** dialog box appears. 5. Enter a **Name** for the certificate. 6. Select the expiry date from the pop-up calendar and click **OK**. 7. Click **Add**. The certificate appears on the **Signing Certificates** page. ## Step 2: Export the signing certificate from Identity as a Service 1. Log in to your Identity as a Service administrator account. 2. Click Menu icon **>** **Security > Applications**. The **Applications List** page appears. 3. Under **SAML Cloud Integrations**, click **SAML Signing Certificates**. The **SAML** **Signing Certificates** page appears. 4. Click next to the certificate to export the certificate you want to import into your SAML service provider application. The **Export Certificate** dialog box appears. 5. If the certificate has been issued by a CA, do one of the following: - Click **Certificate** to export the self-signed certificate. - Click **Root CA Certificate** to export a certificate issued from a CA. - Click **Certificate Chain** to export the SAML signing certificate and its CA certificates. 6. Click **Export**. ## Step 3: Copy the SAML Configurations from Identity as a Service 1. Log into your Identity as a Service administrator account. 2. Click Menu icon **>** **Security > Applications**. The **Applications** **Lists** page appears. 3. Under **SAML Cloud Integrations**, click **SAML Configuration**. The **SAML Configuration** dialog box appears. This dialog box contains information you need to configure your SAML application for Identity as a Service authentication. 4. Do one of the following: - Leave this dialog box open to reference later in this procedure. - Copy the Entity ID, Single Sign-on URL, and Single Logout URL to a text file and save it to reference later in this procedure. note Depending on the integration you are performing, you may not need all three of these SAML configuration values. ## Step 4: Configure SUMO Logic for single sign-on with Identity as a Service 1. Log in to your Sumo Logic account as an administrator. The **Welcome to Sumo Logic** pop-up window appears. 2. Close the pop-up window. The **Sumo Logic Users** page appears. 3. In the menu pane, click **App Catalog**. The **App Catalog** page appears. 4. In the **Search** field, enter **okta**. 5. Click the **okta** link. The **Okta** page appears. 6. Click **Add to Library**. The **Add Okta to Library** dialog box appears. 7. Enter an **App Name**, for example, EntrustIDaaS. 8. Click **Add to Library**. A confirmation prompt appears. 9. Click **Add to Library** on the confirmation prompt. 10. In the menu pane, select **Administration > Security**. The **Security** page appears. 11. Click the **SAML** tab. The **Configuration List** appears. 12. Click **Add Configuration**. The **Add Configuration** dialog box appears. 13. Enter a **Configuration Name**, for example EntrustIDaaS. 14. In the **Issuer** field, enter the **Entity ID** that you copied in _Step 1: Copy the SAML Configurations from Identity as a Service_. 15. Open the certificate you exported in _Step 2: Export the signing certificate from Identity as a Service_ in a text editor such as Notepad. 16. Copy the contents of the certificate and paste them in to the **X.509 certificate** field. 17. For the **Attribute Mapping**, select **Use SAML Subject**. 18. Select **SP Initiated Login Configuration**. 19. In **Login Path** field, enter SumoLogic. 20. In the **Auth Request URL**, enter the **Single Sign-On URL** that you copied in _Step 1: Copy the SAML Configurations from Identity as a Service_. 21. Select **On Demand Provisioning** to automatically create a user the first time they log in to Sumo Logic using SAML. note The user must exist in Identity as a Service. 22. Click **Save**. ## Step 5: Copy the Sumo Logic SAML configurations 1. Log in to your Sumo Logic account as an administrator. The **Welcome to Sumo Logic** pop-up window appears. 2. Close the pop-up window. The **Sumo Logic Users** page appears. 3. In the menu pane, select **Administration > Security**. The **Security** page appears. 4. Click the **SAML** tab. The **Configuration List** appears. 5. In the **Configuration List**, click the name of your Identity Provider, that you created in _Step 3: Configure SUMO Logic for single sign-on with Identity as a Service_. For example, EntrustIDaaS. The **Authentication Request** and the **Assertion Consumer** URLs appear. You need this information in _Step 6: Add Sumo Logic to Identity as a Service_. ## Step 6: Add Sumo Logic to Identity as a Service 1. Log into your Identity as a Service administrator account. 2. Click Menu icon **>** **Security > Applications**. The **Applications** **Lists** page appears. 3. Click **Add**. The **Select an Application Template** page appears. 4. Do one of the following: - Select **SAML Cloud Integrations** from the search drop-down list and scroll to find the application you want to add to IDaaS. - In the **Search bar**, enter a search option to filter for the application you want to add to IDaaS. 5. Click **Sumo Logic**. The **Add Sumo Logic** page appears. 6. Enter an **Application Name**. 7. Enter an **Application Description**. 8. Optional. Add a custom application logo. 1. Click Plus icon next to **Application Logo**. The **Upload Logo** dialog box appears. 2. Click Upload icon to select an image file to upload. 3. Browse to select your file and click **Open**. The **Upload Logo** dialog box reappears showing your selected image. 4. If required, resize your image. 5. Click **OK**. 9. Select the **Authentication Flow** that appears to users during login. 10. Click **Next**. The **General** page appears. 11. In the **Default** **Assertion Consumer Service URL** field, enter the **Assertion Consumer** URL you copied in _Step 5: Copy the SUMO Logic SAML configurations_. 12. In the **Service Provider Entity ID** field, enter `https://service.eu.sumologic.com` 13. Optional. Enter the **SAML Username Parameter Name** used to identity the user ID being requested for authentication. The user ID can then be passed as a parameter, for example, Username=jdoe. Alternately, if the SAML username is NameID, the SAML Request XML NameID element value is used to the identify the IDaaS userID. 14. Enter the **SAML Session Timeout** to the time when the SAML Assertion times out. The maximum is 720 minutes. 15. Enter the **Max Authentication Age (seconds)** to set the maximum amount of time that can elapse before a user is required to reauthenticate during a new login attempt. This applies for both SP-initiated and IDP-initiated login. Set this field to -1 to disable this feature. 16. From the **SAML NameID Attribute** drop-down list, select **Email**. 17. From the **SAML NameID Encoding Format** drop-down list, select **Email**. 18. From the **SAML Signing Certificate** drop-down list, select the signing certificate you copied into Sumo Logic in _Step 4: Configure Sumo Logic for single sign-on with Identity as a Service_. 19. Deselect **Enable Go Back Button** if you do not want users to be able to go back to the application login page to log in. 20. Select **Show Default Assertion Consumer URL Service in the My Profile**. When selected, the Default Assertion Consumer URL appears in a user's My Profile page in addition to relay states and Alternative Assertion Consumer URLs. 21. Optional. Add **Alternative Assertion Consumer Service URLs**, as follows: 1. Click **Add**. 2. Enter a **Name**. 3. Enter a URL **Value**. 4. Select **Show in My Profile** to display the Alternative Consumer Service URL in a user's My profile page. 5. Optional. **Add an Application Logo**. 6. Click **Add**. 7. Repeat these steps to add more Alternative Assertion Consumer Service URLs. 22. Include First Name and Last Name user attributes in the SAML assertion, as follows: 1. Add a **First Name** user attribute: 1. Under **SAML Attributes**, click **Add**. The **SAML Attributes** dialog box appears. 2. In the **Name, enter** **First Name**. 3. Click **Add** next to **Value(s)**. 4. In the **Values** field type **<** and select **** 5. **Click** **Add.** 2. Add a **Last Name** SAML attribute: 1. Under **SAML Attributes**, click **Add**. The **SAML Attributes** dialog box appears. 2. In the **Name** field enter **Last Name**. 3. Click **Add** next to **Value(s)**. 4. In the **Values** field type **<** and select **** from the drop-down list. 5. Click **Add**. 23. Leave the remaining settings at the default values. 24. Click **Submit**. ## Step 7: Add a resource rule See [Create resource rules](/docs/authentication-and-security/create-and-manage-resource-rules.md). ## Step 8: Test the integration ### Testing Service Provider Login 1. Open a Web browser and enter the URL for your Sumo Logic account. You are directed to Identity as a Service. 2. Enter your Sumo Logic account **User ID** and click **Next**. 3. Respond to the second-factor authentication challenge. If you respond successfully, you are logged in to Sumo Logic. ### Testing Identity as a Service redirect log in 1. Log in to your Identity as a Service account. 2. Go to your **My Profile** page if you are not already there. 3. Under **Applications**, click **Sumo Logic**. 4. Respond to the second-factor authentication challenge. If you respond successfully, you are logged in to Sumo Logic. Testing Identity as a Service redirect log in Log in to your Identity as a Service account. Go to your **My Profile** page if you are not already there. Under **Applications**, click **Sumo Logic**. Respond to the second-factor authentication challenge. If you respond successfully, you are logged in to Sumo Logic.