This article explains how to configure ID Entrance as the Single Sign-On (SSO) provider for remote-access users. With SSO, users authenticate to the Cato Client with their identity provider credentials. For more information, see SSO Authentication for Users with Cato.
Configuring ID Entrance as an SSO Provider
To configure ID Entrance as your SSO provider, first complete the configuration on the ID Entrance portal with the ID Entrance Support Center. Then enter the integration details in the Cato Management Application (CMA) and configure the user authentication settings.
Step 1: Configure the ID Entrance Portal
For configuration on the ID Entrance side, contact the ID Entrance Support Center:
Phone: 03-6732-7766 (within Japan) or +81-3-6732-7766 (from outside Japan).
Email: ident-supp@canon-its.co.jp.
Business hours: Monday to Friday, 9:00 AM to 5:00 PM (Japan time), excluding public holidays and other company holidays.
When you contact the support center, provide the following information:
Administrator's name
Contract number
After completing the ID Entrance configuration, make sure you have the following integration details to enter in the CMA:
Well-Known URL: The OpenID Connect (OIDC) discovery URL.
Client ID
Client Secret
Step 2: Configure ID Entrance in the CMA
Enter the integration details from Step 1 to add ID Entrance as an SSO provider.
To configure ID Entrance as an SSO provider:
In the CMA, from the navigation menu, click Access > Single Sign On.
Click New.
From the Identity Provider drop-down menu, select the ID Entrance provider.
Enter a Name to identify this integration.
(Optionally) Enable the Default toggle to configure ID Entrance as your default SSO provider. If you are configuring multiple SSO providers, see Configuring Multiple Identity Providers.
Enter the Well-Known URL and Client ID from Step 1.
Click Edit Client Secret and enter the Client Secret from Step 1.
Click Apply.
Configuring User Authentication Settings
Configure SSO authentication for users and define how long the Cato authentication token remains valid. The Token validity settings define the time, in days or hours, that users remain authenticated since their last login. Users must reauthenticate when this period expires. With Always Prompt, users must authenticate each time they log in to the Client.
To configure user authentication settings:
On the Access > Single Sign On page, enable SSO authentication for users.
(Optionally) Configure the Token validity, Cookie type, and Duration settings.
Click Save.