Integration

Integration is a service that sets up and manages authentication services and account information for various applications.

In SCP SingleID, we support integration with new applications through customized authentication linkage and account distribution services, as well as the DIY (Do-It-Yourself) feature.

Through the integration menu, we provide integration management features such as Application, Identity Provider, Authenticator, MFA Service Provider.

Application

The application is a menu that registers and connects various applications to apply the authentication service of SCP SingleID.

The administrator can register/modify a new application through the application list screen, and can sort, search, and delete registered applications.

Application List

The administrator can select a registered application on the application list screen to edit/delete, sort, search, etc., and can navigate to a menu screen where a new application can be registered.

To check the application list, access the menu as follows.

• Admin Portal > Integration > Application

Application Registration

The administrator can register the application by clicking the Register button on the list screen.

Application registration is possible in two ways: Custom App Integration and Pre-Built App Integration.

To register an application, access the menu as follows.

• Admin Portal > Integration > Application > Register Button Click
• Custom App Integration or Pre-Built App Integration Select tab

Custom App Integration

Custom App Integration registration is a connection menu for authenticating the application you want to integrate and distributing accounts.

We provide three types of connection functions as follows.

When you want to register an application by linking authentication, you provide and select the type (SAML, OIDC) according to the standard authentication linkage method.

When registering an application by linking account distribution, we provide the standard online API method (SCIM).

To register the application Custom App Integration, follow the steps below.

1. Admin Portal > Integration > Application > Register Click button
2. Custom App Integration > Web Application(SAML) orWeb Application(OIDC) or Identity Provisioning(SCIM v2.0) select > Next click the button
3. Go to detailed settings

Through a screen consisting of six steps as follows, you can enter and configure the information required for integration and register the application.

Applications using standard protocols (SAML, OIDC, SCIM) can register information and set policies and attributes through a screen consisting of the following six steps.

1. General
2. SSO
3. Provisioning
4. Profile
5. Policy
6. Assignment

General

Enter the general application information by referring to the below.

SSO

On the SSO information input screen, enter Single Sign On configuration information.

Provisioning

The Provisioning menu is an account management function that can distribute user information to applications for synchronization. In SingleID, we provide methods based on global standard API specifications such as SCIM and REST.

On the Provisioning information input screen, enter the configuration information for account information distribution.

Profile

Enter the setting information for user/group for deployment on the profile information input screen.

After entering all items and clicking the Complete button, the basic application settings are completed. When you complete registering a new application, it will be added to the application list and new tabs called Policy, Assignment will be created.

Policy

You can set login policy and access control information for application policy configuration.

Allocation

Register information for assigning application users based on users and groups. This menu assigns access permissions by setting the users and groups that can access the registered application.

If you want to assign a user, follow the steps below.

1. If you click the application, you will be taken to the detailed page of that application.
2. Click the Assign tab and User tab > Assign button
3. User Assignment When the popup appears, select the user you want to assign, and click the Assign button.
4. Assignment tab shows the selected user in the list.

Pre-Built App Integration

Pre-Built App Integration menu provides a convenient way to quickly and easily connect the SaaS application you want to use, by pre-preparing necessary settings such as connection information, name, icon, so you can use it conveniently.

To integrate the application via Pre-Built App Integration, check the menu path below.

• Admin Portal > Integration > Application > Register > Pre-Built App Integration Click tab
• Application select > Next button click
• Go to detailed settings

Pre-Built App Integration menu, like the Custom App Integration menu, can register an application by entering and configuring the necessary integration information through a screen consisting of six steps as follows.

The input items and methods for each step are the same, except for the information that has been predefined and entered for Pre-Built.

1. General
2. SSO
3. Provisioning
4. Profile
5. Policy
6. Assignment

General

Enter the general application information by referring to the below.

SSO

Enter Single Sign On setting information on the SSO information input screen.

Provisioning

The Provisioning menu is an account management function that can distribute user information to applications for synchronization. In SingleID, we provide methods based on global standard API specifications such as SCIM and REST.

Enter the configuration information for account information distribution on the Provisioning information input screen.

Profile

Enter the user/group configuration information for deployment on the profile information input screen.

After entering all items and clicking the Complete button, the basic application settings are completed. When you complete registering a new application, it is added to the application list and new tabs called Policy, Assignment are created.

Policy

You can set login policies and access control information for application policy settings.

Assignment Settings

Register information for assigning application users based on User and Group. This menu assigns access permissions by setting users and groups that can access the registered application.

To assign a user, follow the steps below.

1. When you click the application, you will be taken to the detailed page of that application.
2. Click the Assign tab and the User tab > Assign button.
3. User Assignment When the popup appears, select the user you want to assign, and click the Assign button.
4. Assignment tab shows the selected user in the list.

Application Modification

You can modify the settings by clicking the application on the list screen.

If you want to modify the application, follow the steps below.

1. Admin Portal > Integration > Select Application > Edit Click the button.
2. Click the General, SSO, Provisioning, Policy, Assignment, Permission Items, Rebranding tab to edit the items.
3. Save button을 클릭하세요.

Permission Items

The permissions tab provides synchronization integration with the application’s permissions.

If you want to set permissions, follow the steps below.

1. If you click the application, you will be taken to the detailed page of that application.
2. Click the Assignment tab and the Permission Items tab > click the Register button.
3. Permission item When the popup window appears, it is necessary to register the permission item.
4. Enter Permission, key, display name, content and click Save to register the permission.

Rebranding

When registering in the application, an additional rebranding tab that does not appear is created. The application’s rebranding includes rebranding functionality for the login page when accessing a separate application.

The included rebranding features are as follows.

• Favicon : The favicon can be edited in the browser.
• Header logo: The header logo on the login screen can be changed to the logo you want.
• Key visual image: The key image set by default on the login page can be modified.
• Sign-up page redirection: Registration can be done on a separate operating sign-up page instead of SingleID’s sign-up page.
• Privacy Policy Redirection: You can register the privacy policy URL used in the existing application.
• Terms of Service redirection: You can register the Terms of Service URL used in the existing application.

UI

By clicking the application on the list screen, and clicking the edit button on the rebranding tab, you can configure application-specific UI rebranding.

Favicon Change

Favicon changes in the application can be set according to the characteristics of the corporate application.

If you want to edit the favicon, follow the steps below.

1. Admin Portal > Integration > Select Application > UI > Edit Click the button.
2. Favicon select custom in the Favicon item.
3. Favicon image (pencil shape) Click the item, then click the favicon image.
4. Upload an icon file or enter the icon image URL.
5. Save button, click it and verify through the preview screen that the upload was successful. 6.Korean page Enter the title in Korean.
6. English page Enter in English in the title.
7. If the input is completed, check through the right preview whether it was entered correctly.
8. Click the Publish button at the lower right corner.

Header Logo Change

In the application, separate header logo changes can be configured to suit the characteristics of the corporate application.

If you want to edit the header logo, follow the steps below.

1. Admin Portal > Integration > Select Application > UI > Edit Click the button.
2. Header Logo Select custom in the item.
3. Text logo and image logo can be selected and set.
4. Enter the Korean Redirect URL and the English Redirect URL.
5. If the input is completed, check through the right preview whether it was entered correctly.
6. Click the Publish button at the lower right corner.

Key Visual Change

In the application, separate key visual changes can be configured to suit the characteristics of the corporate application.

If you want to edit the key visual, follow the steps below.

1. Admin Portal > Integration > Application Selection > UI > Edit button, click it.
2. Key Visual Select Custom in the item.
3. Click to use a single key visual for all languages and language-specific key visuals.
4. If the image upload is complete, check through the right preview to see if it was entered correctly.
5. Click the Publish button at the lower right.

Redirect

By clicking the application on the list screen, then clicking the edit button in the Rebranding tab, you can configure application-specific rebranding for redirection.

Application Deletion

From the application list screen, select the application, deactivate it, then return to the list screen and you can delete it from the three‑dot menu. To register again, click the Add button to register.

Identity Provider

This is a menu for registering and managing IdPs that provide authentication services and credentials to SCP SingleID. At this time, SCP SingleID acts as a Service Provider and receives authentication services from the IdP.

Identity Provider List

On the list screen, you can select a registered Identity Provider to edit/delete, sort, search, etc., and you can navigate to a menu screen where you can register a new Identity Provider.

To view the Identity Provider list, you can access the following menu.

• Admin Portal > Integration > Identity Provider

Identity Provider Registration

You can register by clicking Register at the top of the Identity Provider list screen.

To register Identity Provider, follow the steps below.

1. Admin Portal > Integration > Identity Provider > Register Click button
2. Custom App Integration > Web Application(SAML) or Web Application(OIDC) select > next click the button
3. Go to detailed settings

Identity Provider can be registered by entering and setting the information required for integration through a three-step screen as follows.

• General
• SSO
• JIT Provisioning

General

Enter general information for IdP (Identity Provider).

SSO

Enter Single Sign On configuration information on the SSO information input screen.

When integrating with Web Application (OIDC)

JIT provisioning

Identity Provider’s JIT provisioning feature tab has been added. This feature synchronizes accounts in real time when user changes occur. You can set items when synchronizing accounts in real time.

After entering all items and clicking the Complete button, the basic application settings are completed.

Identity Provider Edit

If you click the Identity Provider in the list screen, you can modify the settings.

If you want to modify the Identity Provider, follow the steps below.

1. Admin Portal > Integration > Identity Provider Select > Edit Click the button.
2. Click the General, SSO, Provisioning, Policy, Assignment tab to edit the items you want to modify.
3. Save button을 클릭하세요.

Identity Provider Delete

On the Identity Provider list screen, after selecting an Identity Provider and disabling it, you can return to the list screen and delete it from the three‑dot menu. To register again, click the Add button to register.

Authenticator

Configure by integrating the Authenticator provided by SCP SingleID. By default, password and Email are set to active state.

The Authenticator that is additionally configured and provided is as follows.

• Knox Messenger: OTP can be sent via Knox Messenger.
• PC SSO Agent: SingleID: Provides SSO with Agentless, but uses SSO Agent for multi-browser SSO functionality,
• SingleID Authenticator: It is a SingleID dedicated authentication mobile app that supports biometrics (fingerprint, facial), PIN, mOTP, TOTP.
• SMS: OTP can be sent via mobile SMS.

• Active Directory: Performs authentication with an AD account.
• Passkey: Mobile Passkey, security key, a convenient authentication method that allows easy login with Windows biometric/PIN code.

Authenticator List

We support all authenticators of the six available types.

If you want to check the Authenticator, please check at the following path.

• Admin Portal > Integration > Authenticator

Authenticator Add

When you click Register on the Authenticator list screen, it moves to the next screen and switches to a screen where you can add an Authenticator.

Authenticator를 추가하시려면, 다음의 절차를 따르세요. -> If you want to add an Authenticator, follow the steps below.

1. Admin Portal > Integration > Authentictor > Add Click the button.
2. each authentication methodto select > Next Click the button.
3. Enter the information required for authentication settings.
4. Click the Save button.

Authenticator Edit

On the Authenticator list screen, after selecting an Authenticator and clicking edit, it switches to a screen where you can edit.

If you want to modify the Authenticator, follow the steps below.

1. Admin Portal > Integration > Authentictor > Edit button click
2. Edit each item and click the Edit button to complete the modification.

Authenticator Delete

On the Authenticator list screen, select the Authenticator, deactivate it, then return to the list screen and you can delete it from the three‑dot menu. If you want to register again, click the Add button to register.

MFA Service Provider

MFA Service Provider menu provides a service that enhances user convenience by meeting the security requirements required by companies through multi-factor authentication, applying stronger authentication technologies along with biometric and simple authentication technologies.

MFA Service Provider List

To check the MFA Service Provider list, you can access the following menu.

• Admin Portal > Integration > MFA Service Provider

MFA Service Provider Registration

To register the MFA Service Provider, follow the steps below.

1. Admin Portal > Integration > MFA Service Provider > Register button click
2. ADFS Federated Application or Custom Application or Network Equipment select > next button click

You can register an MFA Service Provider by entering and configuring the information required for MFA Service Provider integration through a three-step screen as follows.

• General
• MFA integration
• [Person in charge](#person in charge)

General

MFA Service Provider Enter general information.

MFA integration

Enter MFA integration information.

Person in charge

Select and register the person in charge of the newly registered MFA Service Provider.

Click the Complete button to complete the registration.

MFA Service Provider Edit

On the MFA Service Provider list screen, after selecting the Authenticator and clicking edit, it switches to a screen where you can modify.

If you want to modify the MFA Service Provider, follow the steps below.

1. Admin Portal > Integration > MFA Service Provider > Edit Click the button.
2. Modify each item and click the Edit button to complete the modification.

MFA Service Provider Delete

MFA Service Provider list screen, select the MFA Service Provider, deactivate it, then return to the list screen and you can delete it from the three‑dot menu. To register again, click the Add button to register.