This guide assumes you already have Anaplan XL Web running using an SQL-based repository using the Role model. The authentication currently used doesn't matter at this stage.
Provider metadata
First, you must export the Application/Service metadata from the provider service. This includes information such as the URLs Anaplan XL Web will access to authenticate and any certificates needed for the request.
Anaplan XL Web Config
On the Anaplan XL Web Management Console window, switch the authentication type to Customer Provider and select Configure.
On the Authentication Provider Config window, select the Import Provider XML button. Then, browse to and import the Provider Metadata XML file.
You then have other options to consider:
- Redirect vs Postback — this is provider-specific. The most common is Redirect.
- Redirect - Identity provider initiated. This is the most common option. When Anaplan XL Web is accessed directly, users will be sent to the provider's login page. They can optionally access Anaplan XL Web directly from the provider's portal.
- Postback - Service provider initiated. Anaplan XL Web must be the first point of access, and it sends an AuthN request to the identity provider. If encryption is required on this request, you must download the certificate, import it, and provide the password under the "Advanced" tab of the FluenceXLWeb config tool.
- Custom auth procedure. View the SQL-based user mapping section for more information.
- Enable scheduler access. View the Scheduling section for more information.
- Enable provider-initiated sign-on. This enables the sign-on process to be started from the identity provider. This allows Anaplan XL Web to be accessed directly from the identity provider.