As we reach the end of September 2024, ThreadFix version 3.x on-premises has officially reached its End-of-Life. Therefore, there is no longer support or updates for this version of the product. We have fully transitioned our product and development teams to focus ThreadFix SaaS and migrating all customers over from the on-premises versions. Our Customer Success and Support teams are here to help you in migrating to ThreadFix SaaS and maximizing the value you see from this improved offering from Coalfire. This is the next phase of ThreadFix and our team is looking forward to continuing to support you on this journey.
Advanced SAML Settings
You will learn
How to create a new SAML integration and change SAML settings.
Prerequisites
Audience: IT Professional
Difficulty: Advanced
Time needed: Approximately 15 minutes
Tools required: See Pre-requisites list below
Pre-requisites List:
ThreadFix instance running in Kubernetes
kubectl access to Kubernetes cluster
Helm version greater than 3.2
Bash compatible terminal
Basic SAML Settings
Basic SAML Settings can be changed from the UI by navigating to the Global menu→ Administration → System Settings → SAML Settings. If more advanced configurations are needed, use the following guide for creating and updating SAML settings.
Changing Settings in Existing SAML
If there is already a working SAML integration. Follow the instructions below to change settings.
Enter the following commands on a command line to perform the described action.
Get the Helm release name for the ThreadFix instance.
TF_RELEASE=$(helm ls | grep threadfix | awk '{print $1}')
Get the current installed version of ThreadFix.
TF_VERSION=$(helm ls --filter "$TF_RELEASE" | grep -o 'threadfix-[Az0-9\.\-]*' | sed 's|threadfix-||g')
Export the currently installed Helm values.
helm get values $TF_RELEASE > myValues.yaml
Backup values to a separate file.
Change SAML settings:
Open myValues.yaml in a text editor.
Locate the 'onelogin.saml.properties' section.
Edit properties as desired.
Save the file.
Update the ThreadFix Helm installation.
If not using 'denimgroup/threadfix' as the chart name, this value must be changed to the location of the ThreadFix chart. Use helm search repo threadfix to find the correct chart name.
Restart the authorization container.
Create New SAML Integration
If the ThreadFix instance does not have any current SAML integrations, follow this section.
Get the Helm release name for the ThreadFix instance.
Get the current installed version of ThreadFix.
Export the currently installed Helm values.
Backup values to a separate file.
Pull the ThreadFix chart locally.
Unzip the ThreadFix chart archive.
Add the default onelogin.saml.properties to myValues.yaml.
Change SAML settings:
Open myValues.yaml in a text editor.
Locate the 'onelogin.saml.properties' section.
Edit properties as desired.
Save the file.
Update the ThreadFix Helm installation.
If not using 'denimgroup/threadfix' as the chart name, this value must be changed to the location of the ThreadFix chart. Use helm search repo threadfix to find the correct chart name.
Restart the authorization container.
Table of Contents
www.threadfix.it | www.coalfire.com
Copyright © 2024 Coalfire. All rights reserved.
This Information Security Policy is CoalFire - Public: Distribution of this material is not limited.