Single Sign-On

Here you can learn how to configure a SSO login for SQreamDB Acceleration Studio by integrating with an identity provider (IdP). A SSO authentication allows users to authenticate once and then seamlessly access SQreamDB as one of multiple services.

Before You Begin

It is essential you have the following installed:

  • SQreamDB Acceleration Studio v5.9.0

  • There should be an NGINX (or similar) service installed on your Acceleration Studio machine, which will serve as a reverse proxy. This service will accept HTTPS traffic from external sources and communicate with Studio via HTTP internally

  • You have LDAP set as your authentication management service.

Setting SQreamDB Acceleration Studio

  1. In your sqream_legacy.json file, add the ssoValidateUrl flag with your IdP URL.

    Example:

    "ssoValidateUrl": "https://auth.pingone.eu/9db5d1c6-6dd6-4e40-b939-e0e4209e0ac5/as/userinfo"

  2. Set Acceleration Studio to use SSO by adding the following flag to your sqream_admin_config.json file:

    • mfaRedirectUrl flag with your redirect URL

    Example:

    "mfaRedirectUrl": "https://auth.pingone.eu/9db5d1c6-6dd6-4e40-b939-e0e4209e0ac5/as/authorize?client_id=e5636823-fb99-4d38-bbd1-6a46175eddab&redirect_uri=https://ivans.sq.l/login&response_type=token&scope=openid profile p1:read:user",

If Acceleration Studio is not yet installed, you can set both URLs during its installation process.

  1. Restart SQreamDB.

  2. Restart SQreamDB Acceleration Studio.