Statuspage SAML SSO integration with OpenAM (ForgeRock)

[Vineeth Vijayan]

How can we integrate SAML SSO for StatusPage with ForgeRock?

We are trying blind with configuration options regarding NameID format, Assertion Attribute mapping, Signing and Encryption settings etc. and it fails(Status: 500) on redirection to SSO target URL.

And issue seems to be the incorrect mapping variables/values. We are trying to figure out the right values and lacks the official documentation.
(As an example : https://docs.datadoghq.com/account_management/saml/#datadog-service-provider-details)

This is the official documentation of the IdP:
https://backstage.forgerock.com/docs/am/6/saml2-guide/#saml2-configure-remote-sp

[M@ICE · Accepted solution]

Hi Vineeth,

Thank you for reaching out to us directly and letting us know you were able to get your SAML integration authenticating successfully using the following:

We used following NameID format, Assertion mapping and changed `SSO target URL` in StatusPage to `SSO-Redirect URL` obtained from ForgeRock (rather than SSO-POST URL).

NAMEID format : urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
Assertion Mapping: emailAddress=mail

We really appreciate that you reached out to our Community and that you shared the resolution to your question. If you have anything else to add or correct, please do share!