Overview
This article explains what must be completed before requesting a live UltraDNS SAML setup call.
A SAML setup call is intended to validate a prepared configuration and help with specific setup issues. It is not intended to replace the documented setup steps or configure your Identity Provider from the beginning.
Before You Request a Call
Complete the following items before requesting or confirming a SAML setup call.
- Review the SAML Setup Process and the SAML Quick Start Guide.
- Make sure an Identity Provider administrator, or someone familiar with your SAML application configuration, is available for the call.
- Configure the UltraDNS Service Provider values in your Identity Provider:
- ACS URL:
https://amsso.ultradns.com/neusso/Consumer/metaAlias/NSSRealm/nss-sp - Entity ID:
nss-sp-hosted
- ACS URL:
- Configure the required SAML attributes exactly as shown:
givennamesnmail
- Confirm the required attributes are lowercase and do not contain namespace prefixes.
- Disable SAML assertion encryption if it is enabled.
- Confirm the NameID format that will be used: Username or Email.
- Confirm your Identity Provider metadata XML is current and ready to provide.
- Confirm your Identity Provider signing certificate is valid and not near expiration.
- Disable MFA at the account level and for each user included in the SAML setup.
- Confirm all users being mapped for SSO have matching identities in your Identity Provider.
- Identify any users that should remain API-only.
- Confirm whether the account owner must retain local UltraDNS username and password login after SAML is enabled.
Important Notes
UltraDNS Support can confirm UltraDNS SAML requirements, validate received SAML details, and help troubleshoot UltraDNS-side setup issues.
UltraDNS Support cannot administer your Identity Provider, configure your claims, update your tenant policies, manage your certificates, or determine how your organization provisions users.
If the account owner must retain local UltraDNS username and password login, enable owner dual access during setup. If owner dual access is not enabled, the account owner’s standard UltraDNS username and password will no longer be supported for portal login after SAML is enabled.
When You Are Ready
After the preparation items are complete, contact UltraDNS Support with your preferred change window and time zone.
If the required preparation is not complete, the call may need to be used as a preparation session instead of a setup validation session.