WCM supports SAML integration with ADFS 2.0–5.0 or Microsoft Azure as the identity provider — enabling single sign-on so users verified by ADFS or Azure are automatically trusted by WCM without a separate login.
💡Quick answers
- What is SAML in WCM? An integration standard that lets ADFS or Azure verify users and pass that identity to WCM — users authenticated by the identity provider are automatically signed in to WCM.
- How do I enable SAML? Go to Site Manager > Configure > System Settings > Integration Tab and enable SAML — if the option isn't visible, contact WCM support. Confirm SAML is in your package with your account team first.
- Are there special considerations? No metadata files are used; as of April 2023 you must supply your own certificate; and your WCM site must be on its permanent live domain before deploying SAML.
- What identity providers are supported? ADFS 2.0–5.0 and Microsoft Azure.
About SAML
Security Assertion Markup Language (SAML) is an internet standard that allows service providers, like WCM, to trust identity providers, like ADFS, so that when the identity provider asserts a user's identity, the service provider accepts that as true.
In other words, when the identity provider tells the site "This is Joe, let him in", the site lets Joe in with all the access that he normally has by logging in to the site directly.
Special considerations
If you've deployed SAML integration before, there are a few special considerations that may differ from your previous experience.
- No Metadata. This implementation doesn't use Identity Provider Metadata nor Service Provider Metadata.
- Certificate. -- in the past, support had provided a certificate for clients to use. As of April 2023, this is no longer the case - you will rely on your own certificate.
* The following information assumes that your ADFS or Azure server is fully maintained, monitored, and secured to the standards set by your network policies and ready for use. For specific questions on the deployments, security, or maintenance of your ADFS or Azure service, please consult your software vendor.
Before you get started
- Add SAML to your account. Contact your account team to check if SAML is part of your WCM package.
- Verify your ADFS or Azure service is fully deployed according to your network policies. For specific questions on deployment, please contact your software vendor.
- Enable SAML within WCM. Enable SAML by navigating to Site Manager > Configure > System Settings > Integration Tab. If you can't enable SAML, reach out to WCM support.
- Verify your WCM site is deployed on your permanent live domain. SAML references the domain name for sending assertions, so don't change domain names after deploying SAML.