Exact Synergy Enterprise

Support of federated identity

Introduction

In this document the level of support for federated identity by Exact is explained.

Note:

• This document is only relevant to the controlled release participants.
  
• This is not available for Exact Cloud customers.
  

Terms

In this paragraph we will explain a number of important terms relevant for support of federated identity.

• Federated identity = using Auth0 or Windows Azure Active Directory as identity provider for Exact Globe+, Exact Synergy Enterprise and\or Exact Lightweight Integration Server. Authentication is based on the usage of the OAuth 2.0 or SAML 2.0 protocol.
• OAuth 2.0 = the protocol used to be able to perform authentication with an identity provider.
• SAML 2.0 = the protocol used to be able to perform authentication with an identity provider.
• Identity provider = the 3rd party which manages authentication of the identity of the user based on configuration information in Exact Globe+, Exact Synergy Enterprise and\or Exact Lightweight Integration Server.
• Auth0 = one of the two by Exact selected and supported identity providers.
• Windows Azure Active Directory (WAAD) = one of the two by Exact selected and supported identity providers.

Level of support

The level of support on federated identity provided by Exact is limited to what is described in this section. Exact supports:

1. Configuration of Exact Globe+, Exact Synergy Enterprise and\or Exact Lightweight Integration Server based on documentation provided via the federated identity start page. If there are questions on the documentation itself, this is covered by support of Exact
2. Configuration of Exact Globe+, Exact Synergy Enterprise and\or Exact Lightweight Integration Server must be done successfully using the Federated Identity Configurator application. The Federated Identity Configurator is provided with Exact Globe+ and Exact Synergy Enterprise. Documentation on how to use the Federated Identity Configurator is provided by Exact. If there are questions on how to use the Federated Identity Configurator, this is covered by support of Exact.
3. To validate if authentication is successful, authentication has to be done for a user with only default policies applies and without extra configuration applied to the user in the solution of the identity provider.
4. Only Auth0 and Windows Azure Active Directory are supported as identity provider.
5. Only OAuth 2.0 and SAML 2.0 are supported as protocol. The overview of which protocol is used in which solution part of the solution can be found here (add link).
6. Exact Globe+ product update 415 or above has to be used.
7. Exact Synergy Enterprise product update 260 or above has to be used.
8. Exact Lightweight Integration Server version 1.1.28.50 or above has to be used.
9. Support as included in article 5 of the terms and conditions of Exact.

Above means that topics on the below listed are not supported. This list is provided as guidance and is not a full list of topics not supported by Exact: 

1. Topics not explicitly mentioned are not supported
2. A subscription with one of the two selected identity providers has to be handled by the customer.
3. Configuration and setup of Exact Globe+, Exact Synergy Enterprise and\or Exact Lightweight Integration Server for federated identity has to be done by the customer. If this needs to be done by Exact, this is a consultancy activity.
4. Use of ADFS or other identity providers then Auth0 and Windows Azure Active Directory is not supported by Exact.
5. Support as excluded in article 6 of the terms and conditions of Exact.