Single Sign-on (SSO)

To enable logging into the platform using your organization's identity provider (IDP), a SAML configuration may be provided in your account settings.

Prerequisites

• Must be configured with an tenant administrator account for your Illumina enterprise domain

• Access to your IDP system to configure the Illumina Service Provider

• Your IDP configurations

  1. Metadata XML

  2. SAML Attributes for EmailId, firstName, LastName

Setup Instructions

1. Login to the IAM Console through the domain login URL and navigate to the "IAM Console" application. The IAM console can also be accessed directly at https://<domain>.login.illumina.com/iam.

   
2. Navigate to the domain tab and choose the authentication menu item on the left pane. Change the Authentication Configuration to "SAML".

   
3. Upload your IDP Metadata XML file.

   
4. Register the Illumina Service Provider (SP) in your IDP system by downloading the illumina_sp.xml file.

   
5. Enter the relevant IDP/SAML attributes (Contact your organization's technical support team for these details).

   

Allow 15 minutes for the Illumina Service Provider to update with the provided information. To confirm SAML configuration changes, go to the domain login URL https://<domain>.login.illumina.com. This should now redirect to the configured IDP login page.

Command-line Interface SSO

The CLI supports single-sign on (SSO) for the login command using the boolean sso configuration setting set through a command line option, environment variable, or config file setting. Enabling this setting will utilize the configured SSO for the domain being logged into through the login command.

$ ica login -d example --sso
Redirecting to login...

SSO login through the command-line interface currently requires a browser

Upon logging in through the browser, the command-line interface will complete the login process.