If you use your own certificate, you upload the signing certificate and its private key in a. To establish a trusted connection between the web application and the CyberArk Identity, you need to have the same signing certificate in both the application and the application settings in the Identity Administration portal. You can either download one from the Identity Administration portal or use your organization’s trusted certificate. For details, Configure Workfront on its web site.Īfter you have finished configuring the application settings in the Identity Administration portal and the Workfront application, users are ready to launch the application from the Identity User Portal.īefore you configure the Workfront web application for SSO, you need the following:Īn active Workfront account with administrator rights for your organization. You will need to copy some settings from Application Settings in the Identity Administration portal and paste them into fields on the Workfront website.

For details, see Configure Workfront in the Identity Administration portal.Ĭonfigure the Workfront application for single sign-on. Once the application settings are configured, complete the user account mapping and assign the application to one or more roles. In the Identity Administration portal, add the application and configure application settings. Prepare Workfront for single sign-on (see Workfront requirements for SSO). Enabling both methods ensures that users can log in to Workfront in different situations such as clicking through a notification email.

You can configure Workfront for either or both types of SSO. Workfront offers both IdP-initiated SAML SSO (for SSO access through the user portal or CyberArk mobile applications) and SP-initiated SAML SSO (for SSO access directly through the Workfront web application).

The following is an overview of the steps required to configure the Workfront Web application for single sign-on (SSO) via SAML.

Workfront servicenow integration