Automatic login methods
Single Sign-on via SAML requirements
TOPdesk uses OpenSAML 3 for authentication. You can connect all common IdP solutions which support SAML 2.0.
The following SAML authentication files are required:
Two RSA certificates and a RSA private key:
If you do not want to use self-signed certificates, you need to have two separate RSA certificates. IdPs such as AD FS do not allow the same certificate to be used for both TOPdesk realms (public and secure). Also, both certificates must be signed with the SHA-1 or SHA-256 algorithm, and need to have X.509 formatting and DER or PEM encoding. The RSA private key needs to have PKCS8 or PKCS12 formatting and DER encoding.
Federation metadata:
You need to supply this in XML format. If your organization uses ADFS, go to the following URL to generate the necessary XML file (replace the information between the brackets): https://<your-ADFS-Domain>/FederationMetadata/2007-06/FederationMetadata.xml The metadata can be uploaded as a file, or linked via the URL in the SAML Configuration in TOPdesk. We generally advise to link via URL, because you can keep using the same URL when the metadata changes.
note
Achieve your desired security level by configuring your IdP accordingly. TOPdesk automatically uses the IdP configuration for the automatic login methods.