IBM Security Verify

Discover step-by-step instructions on configuring a connection with IBM Security Verify. Learn how to integrate your application with IBM Security Verify for secure and streamlined SSO authentication.

How to start

1. Open https://myibm.ibm.com/dashboard and create an IBM Security Verify.
2. You can also go directly to: https://your-company.verify.ibm.com if you already have one

Certificate

1. Download certificate on the right side of this screen
2. Then on IBM SV, access "Security" > "Certificates" section

---

Click on "Add signer certificate"

---

1. In the popup click on "Add a file"
2. Choose a friendly name such as "cryptr_certificate"
3. Click on "OK"

Declare an application

Now, go into "Applications" > "Applications". To create a new one

---

Click on "Add an application"

---

1. In the popup click on "Custom Application",
2. Click on "Add application"

---

1. Type a name and Company name
2. Go to "Sign-on" tab

SAML configuration

1. Ensure "Sign-on method" is "SAML 2.0" and uncheck "Use metadata"
2. In "Provider ID" paste "Provider ID" value present on the right side of this screen 👉
3. In "Assertion consumer service URL (HTTP-POST)*" paste the corresponding value present on the right side of this screen 👉

---

In "Service provider SSO URL" paste the corresponding value present on the right side of this screen 👉

---

1. In "Single logout URL (HTTP-POST)" paste the corresponding value present on the right side of this screen 👉
2. Check "Sign authentication response"
3. Set "Signature algorithm" to "RSA-SHA256"

---

Choose your "Signing certificate"

---

1. Check "Validate SAML request signature"
2. Check "Validate SAML logout request signature"
3. Check "Validate SAML logout response signature"

---

In "Service provider signer certificate", select the previously uploaded certificate

Attributes Mapping

1. Select "Transient" as "NameID Format"
2. Select "email" as "Name identifier"

---

1. Attribute name: family_name
2. Attribute name format: urn...basic
3. Attribute source: family_name

---

1. Attribute name: given_name
2. Attribute name format: urn...basic
3. Attribute source: given_name

---

1. Attribute name: email
2. Attribute name format: urn...basic
3. Attribute source: email

---

1. Attribute name: idp_user_id
2. Attribute name format: urn...basic
3. Attribute source: uid

---

XML Metadata file

1. Download your metadata accessible on the right side of your "Sign-on" Tab in IBM SV.
2. 💡 Link should look like company.verify.ibm.com/v1.0/saml/federations/saml20ip/metadata.
3. Save your app settings.

Drop your downloaded XML metadata

Add Users to your application

1. Go back to your application setting
2. Access the "Entitlements" Tab

---

Click on "Add"

---

1. Select the users that you want to add to your application.
2. Click on "Add"
3. Click on "OK"

Test SSO login

Test SSO login