How to Configure SSO in the Lumu Portal Using Cisco Duo

How to Configure SSO in the Lumu Portal Using Cisco Duo

Learn how to Configure SSO in the Lumu Portal using Cisco Duo by following this article.

Prerequisites

Before you can configure Single Sign-On (SSO) integration with the Lumu Portal using Cisco Duo ensure that you have the following:

  • Administrator access to your Cisco Duo console.
  • An active communication channel with the Lumu Support team to finalize the setup.
  • The email address of each Cisco Duo user that will sign in must match their Lumu Portal account email.

Cisco Duo Setup

Follow the steps in this article to set up, start by logging in in the Cisco Duo Admin Panel and follow the instructions.

1. Go to Applications > Applications.


2. On the Applications page, click + Add application.


3. In the Application Catalog, type saml in the search box. Then, click + Add on the Generic SAML Service Provider card.


4. Configure the application as follows:

  • Set the Application name (e.g. Lumu Portal).
  • Under User access, choose who can sign in to Lumu with Duo:
    • Enable only for permitted groups: only members of the selected groups can access the application.
    • Enable for all users: every Duo user can access the application.

NotesOnly users with access will be able to authenticate to the Lumu Portal via SSO.

5. Under Downloads, next to SAML Metadata, click Download XML to download the IdP metadata XML file. You will need to send this file to Lumu as the last step to finalize the configuration.


6. Under the Service Provider section, configure the Service Provider (Lumu) as follows:

Field Value
Metadata Discovery None (manual input)
Entity ID https://portal.lumu.io/api/v1/users/saml/auth
Assertion Consumer Service (ACS) URL https://portal.lumu.io/api/v1/users/saml/auth
Single Logout URL Leave blank
Service Provider Login URL Leave blank
Default Relay State Leave blank

AlertThe Entity ID and the ACS URL must be identical to the values above. If they don't match what Lumu expects, sign-in fails.

In the SAML Response section, keep the NameID attribute as <Email Address>. Lumu identifies the account by the email in the SAML response, so this mapping is required.

7. To finalize the setup, scroll to the bottom of the page and click Save.

Share the metadata with Lumu

Send the IdP metadata XML file downloaded in step 5 of the previous section to the Lumu Support team. Lumu uses it to configure the backend for your company.

Once Lumu confirms the backend is configured, SSO is active. Users can then sign in from the Lumu Portal login page using the SSO option with their email.

NotesNeed help? Contact the Lumu Support team at any point during the setup.