Table of Contents

CGI Treserva MFA with PhenixID Authenticaton Services

Summary

This document will guide you through the steps to enable SAML and multi-factor authentication for the healthcare solution Treserva, provided by CGI.

Prerequisites

  • Treserva administrator contact

Instructions

Configure PhenixID Authentication Services as Identity Provider

  1. Configure the appropriate authenticators
  2. Setup PhenixID Authentication Services as a  SAML IdP.
  3. Go to Scenarios->Federation->YOUR_IDP->Execution Flow
  4. Verify that the HSA-id attribute is fetched from the data source, such as LDAP, lookup.
  5. Make these changes to your flow:
    1. Click Add valve
    2. Add a PropertyAddValve with these settings
      1. Name =  urn:oid:1.2.752.29.6.2.1
      2. Value = {{item.employeeHsaID}} (If necessary in your environment, change employeeHsaID to the attribute name containing the HSA-id)
    3. Move the new valve to be executed before the AssertionProvider valve
    4. Expand AssertionProvider
    5. Set these values
      1. Name ID Attribute = urn:oid:1.2.752.29.6.2.1
      2. Additional attributes = urn:oid:1.2.752.29.6.2.1
    6. Save. Example screen shot of the configuration: NA

Configure Treserva

Send this information to the Treserva administrator:

  1. The identity provider SAML Metadata URL
  2. The name of the SAML attribute containing the hsaID (urn:oid:1.2.752.29.6.2.1)

The Treserva administrator will send you the SAML Service Provider metadata of the Treserva instance.

Add Treserva as a trusted Service Provider to PhenixID Authentication Services

  1. Login to configuration manager
  2. Add the metadata from Treserva in PAS Add metadata
  3. Add the Treserva metadata url (provided to you by the Treserva administrator, please view previous step). (If your PhenixID Authentication Services server is not able to reach external resources, browse to the Treserva metadata URL on another device and download the metadata to a file. Then upload the file in the SAML Metadata upload scenario).

Test

The Treserva administrator will provide details on how to test.

SAML 2 Single Sign-On Identity Provider Federation Use Case: Federation of web services Use Case: Integrate with external systems MFA Step by Step