SSO Integration Protocol

Tip

MDLIVE Fed-SSO ONLY supports IDP-initiated SSO (SAML2). This session is specific to partners who wish to act as a SAML2 Identity Provider and initiate an SSO connection from their domain to MDLIVE.

Note

MDLIVE SSO client need to share their IDP Server Entity ID and Signing Certificate for both test and production environment with MDLIVE team to configure their IDP server for testing and go live.

Term Explanation

No.	Term	Description
1	SSO	Single sign-on (SSO) is a session and user authentication service that permits a user to use one set of login credentials (e.g. username and password) to access multiple applications.
2	Fed-SSO	Federation single sign-on (Fed-SSO), which allows users to login without passwords, is one of the many SSO solutions.
3	SAML2	Security Assertion Markup Language 2.0 (SAML 2.0) is a version of the SAML standard for exchanging authentication and authorization data between security domains. SAML 2.0 is an XML-based protocol that uses security tokens containing assertions to pass information about a principal (usually an end user) between a SAML authority, that is, an identity provider (IDP), and a SAML consumer, that is, a service provider (SP).
4	IDP	An Identity Provider (IDP), also known as Identity Assertion Provider, is responsible for providing identifiers for users looking to interact with a system, asserting to such a system that such an identifier presented by a user is known to the provider, and possibly providing other information about the user that is known to the provider. In MDLIVE Fed-SSO Integration, Client’s Server is the IDP server.
5	SAML2 IDP	SAML2 IDP is an Identify Provider which can generate SAML2 assertions with information about the end user. Client MUST have a SAML2 IDP for MDLIVE Fed-SSO Integration.
6	SAML2 SP	SAML2 SP is a Service Provider which can consume and process SAML2 assertions from authorized SAML2 IDPs. In MDLIVE Fed-SSO Integration, MDLIVE Fed-SSO Service is the SAML2 SP.
7	IDP-initiated	In IDP-initiated SSO, the Federation process is initiated by the IDP sending an unsolicited SAML Response to the SP.

MDLIVE SSO Integration Protocol

No.	Integration	Protocol
1	Initiator	Client’s SAML2 IDP
2	Protocol	SAML 2.0
3	SAML Profile	Web Browser
4	SAML Binding	HTTPS Post

HTTPS Post Request Body Security Protocol

No.	Security Protocol	Supported
1	SAML2 Assertion Level Base64 Format Encoding	YES (Recommended)
2	SAML2 Assertion Level Encryption with SP Public Certificate	YES
3	SAML2 Assertion Attribute Level Encryption	NO
4	SAML2 Assertion Level Plain Text	NO