Integration

Integration is a service that configures and manages authentication services and account information for various applications.

In SCP SingleID, we support integration with new applications through customized authentication integration and account provisioning services, as well as a DIY (Do-It-Yourself) feature.

Through the integration menu, it provides integration management functions such as Application, Identity Provider, Authenticator, MFA Service Provider.

Application

The application is a menu for registering and linking various applications to apply SCP SingleID’s authentication service.

The administrator can register or edit a new application through the application list screen, and can sort, search, and delete registered applications.

Application List

The administrator can select a registered application on the application list screen to edit/delete, sort, search, etc., and can navigate to a menu screen where a new application can be registered through registration.

To view the list of applications, access the menu as follows.

• Admin Portal > Integration > Application

Application registration

The administrator can register the application by clicking the Register button on the list screen.

Application registration can be done using two methods: Custom App Integration and Pre-Built App Integration.

To register an application, access the menu as follows.

• Admin Portal > Integration > Application > Register Click the button
• Custom App Integration or Pre-Built App Integration Select tab

Custom App Integration

Custom App Integration registration is the connection menu for authenticating the application you want to integrate and provisioning the account.

We provide three types of connection functions as follows.

When registering an application by linking authentication, you provide and select the type (SAML, OIDC) according to the standard authentication integration method.

When registering an application by linking account provisioning, we provide the standard online API method (SCIM).

To register the application Custom App Integration, follow the steps below.

1. Click the Admin Portal > Integration > Application > Register button
2. Custom App Integration > Web Application(SAML) orWeb Application(OIDC) or Identity Provisioning(SCIM v2.0) Select > Next Click the button
3. Go to detailed settings

You can register an application by entering and configuring the information required for integration through a six-step screen as shown below.

Applications using standard protocols (SAML, OIDC, SCIM) can register information and configure policies and attributes through a screen consisting of the following six steps.

1. General
2. SSO
3. Provisioning
4. Profile
5. Policy
6. allocation

General

Enter the general application information as referenced below.

SSO

On the SSO information entry screen, enter the Single Sign On configuration settings.

Provisioning

The Provisioning menu is an account management feature that can distribute user information to applications for synchronization. SingleID provides global standard API specifications such as SCIM and REST.

On the Provisioning information entry screen, enter the configuration settings for account distribution.

Profile

Enter the configuration information for User/Group for deployment on the profile information input screen.

After entering all items, click the Complete button to complete the basic application settings. When you complete registering a new application, it is added to the application list, and new tabs called Policy, Assignment are created.

Policy

You can configure login policy and access control information for application policy settings.

Allocation

Register information for assigning application users based on users and groups. This menu assigns access permissions by configuring the users and groups that can access the registered application.

To assign a user, follow the steps below.

1. When you click the application, you will be taken to the application’s detail page.
2. Click the Assignment tab and click the User tab > Assign button.
3. User Assignment When the popup appears, select the user to assign, and click the Assign button.
4. In the Assignment tab, the selected user appears in the list.

Pre-Built App Integration

The Pre-Built App Integration menu offers a convenient way to quickly connect and use the desired SaaS application, with necessary settings such as connection information, name, and icon prepared in advance.

To integrate the application using Pre-Built App Integration, refer to the menu path below.

• Admin Portal > Integration > Application > Register > Pre-Built App Integration Click the tab
• Select Application > Next button click
• Go to detailed settings

The Pre-Built App Integration menu, like the Custom App Integration menu, allows you to register an application by entering the required integration information and configuring it through a six-step screen as shown below.

The input items and methods for each step are the same, except for the information that has been predefined and entered for Pre‑Built.

1. [General] {#general-1}
2. [SSO] {#sso-1}
3. [Provisioning] {#provisioning-1}
4. [Profile]{#file-1}
5. [Policy] {#policy-1}
6. [Assignment] {#configuration}

General

Enter the general application information as referenced below.

SSO

Enter the Single Sign On configuration information on the SSO information entry screen.

Provisioning

The Provisioning menu is an account management feature that can distribute user information to applications for synchronization. SingleID provides global standard API specifications such as SCIM and REST.

Enter the configuration settings for account information distribution on the Provisioning information input screen.

Profile

On the profile information entry screen, enter the user/group settings for deployment.

After entering all items, click the Complete button to complete the basic application configuration. When you complete registering a new application, it is added to the application list, and new tabs called Policy, Assignment are created.

Policy

You can configure login policies and access control information for application policy settings.

Allocation Settings

Register information for assigning application users based on users and groups. This menu assigns access permissions by configuring the users and groups that can access the registered application.

To assign a user, follow the steps below.

1. When you click the application, you are taken to its detail page.
2. Click the Assign tab and then click the User tab > Assign button.
3. User Assignment popup appears, select the user to assign, and click the Assign button.
4. The selected user appears in the list on the Assignment tab.

Application modification

When you click an application in the list view, you can edit its settings.

To modify the application, follow the steps below.

1. Click the Admin Portal > Integration > Select Application > Edit button.
2. Click the General, SSO, Provisioning, Policy, Assignment, Aggregation, Permission Items, Rebranding tab to edit the items you want to modify.
3. Click the Save button.

Permission item

The permission items provide synchronization by linking the user roles of the integrated application with SingleID.

Register permission item

To set the permission items, follow the steps below.

1. When you click the application, you are taken to its detail page.
2. Click the Allocation tab and the Permission Items tab > click the Register button.
3. When the Permission item popup appears, you need to register the permission item.
4. Enter Name, Key, Display Name, Content and click Save to register the permission.

Rebranding

A rebranding tab that does not appear during registration in the application is added. Rebranding of the application includes login page rebranding functionality when accessed as a separate application.

The included rebranding features are as follows.

• Favicon: The favicon can be modified in the browser.
• Header logo: The header logo on the login screen can be modified to the logo you desire.
• Key visual image: The key image set by default on the login page can be modified.
• Sign‑up page redirection: Registration can be directed to a separate operational sign‑up page instead of SingleID’s sign‑up page.
• Privacy Policy Redirection: You can register the privacy policy URL that was used in the existing application.
• Terms of Service redirection: You can register the Terms of Service URL previously used in the existing application.

UI

From the list screen, click the application, then in the Rebranding tab, click the Edit button to configure application-specific rebranding settings for the UI.

Change favicon

In the application, you can set a custom favicon to match the characteristics of the enterprise application.

To modify the favicon, follow the steps below.

1. Admin Portal > Integration > Select Application > UI > Edit Click the button.
2. Select custom in the Favicon item.
3. Favicon image (pencil shape) item, then click the favicon image.
4. Upload an icon file or enter the icon image URL.
5. Click the Save button and use the preview screen to confirm that the upload was successful. 6.Korean page Enter the title in Korean.
6. English page Enter the title in English.
7. Once the input is complete, use the preview on the right to confirm that it was entered correctly.
8. Click the Publish button at the lower right corner.

Header logo change

In the application, you can configure separate header logo changes to match the characteristics of the corporate application.

To modify the header logo, follow the steps below.

1. Click the Admin Portal > Integration > Select Application > UI > Edit button.
2. Select Custom in the Header Logo item.
3. You can select and configure a text logo or an image logo.
4. Enter the Korean Redirect URL and the English Redirect URL.
5. If the input is complete, use the preview on the right to confirm that it was entered correctly.
6. Click the Publish button at the lower right.

Key visual change

In the application, you can configure separate key visual changes to match the characteristics of the corporate application.

To edit the key visual, follow the steps below.

1. Admin Portal > Integration > Select Application > UI > Edit Click the button.
2. In the key visual item, select Custom.
3. Click to use a single key visual for all languages or language‑specific key visuals.
4. If the image upload is complete, verify through the right preview that it was entered correctly.
5. Click the Publish button at the lower right corner.

Redirection

From the list screen, click the application, then in the Rebranding tab, click the Edit button to configure application‑specific rebranding settings for the redirect.

Sign up

Sign-up allows you to configure a registration link for each application.

Privacy Policy

The privacy policy can be redirected to the URL link of the privacy policy provided for each application.

Terms of Use

The Terms of Service can be redirected to the privacy policy URL link provided for each application.

Delete application

On the application list screen, select the application, deactivate it, then return to the list screen and you can delete it from the three‑dot menu.

Identity Provider

This is the menu for registering and managing IdPs that provide authentication services and credentials to SCP SingleID. At this point, the SCP SingleID acts as a Service Provider and receives authentication services from the IdP.

Identity Provider list

On the list screen, you can select a registered Identity Provider to edit/delete, sort, search, etc., and you can navigate to a menu screen where you can register a new Identity Provider.

To view the Identity Provider list, you can access the following menu.

• Admin Portal > Integration > Identity Provider

Identity Provider registration

On the Identity Provider list screen, click Register at the top to add a new entry.

To register an Identity Provider, follow the steps below.

1. Admin Portal > Integration > Identity Provider > Register Click the button
2. Custom App Integration > Web Application(SAML) or Web Application(OIDC) Select > Next Click the button
3. Go to detailed settings

You can register an Identity Provider by entering and configuring the required integration information through a three-step screen as follows.

• [General] {#General-2}
• [SSO] {#sso-2}
• [JIT provisioning] {#jit}

General

Enter the general information for the IdP (Identity Provider).

SSO

Enter the Single Sign-On configuration information on the SSO input screen.

When integrating with a Web Application (OIDC)

JIT provisioning

The JIT provisioning feature tab has been added to the Identity Provider. This feature synchronizes the account in real time when a user’s changes occur. You can configure items when the account is synchronized in real time.

After entering all items, click the Complete button to complete the basic application setup.

Modify Identity Provider

On the list screen, you can modify the settings by clicking the Identity Provider.

If you want to modify the Identity Provider, follow the steps below.

1. Click the Admin Portal > Integration > Select Identity Provider > Edit button.
2. Click the General, SSO, Provisioning, Policies, Assignment tab to edit the items.
3. Click the Save button.

Delete Identity Provider

On the Identity Provider list screen, select an Identity Provider, deactivate it, then return to the list screen where you can delete it from the three‑dot menu. To register again, click the Add button.

Authenticator

Configure by integrating the Authenticator provided by SCP SingleID. Password and Email are enabled by default.

The types and functions of Authenticators are as follows.

• Password: The Password Authenticator verifies a password known only to the user to authenticate the user as a knowledge‑based authentication method. * It is the built-in Authenticator used for primary and secondary authentication, and it cannot be deleted or disabled for security reasons.
• Email: An ownership-based authentication method that authenticates the user through an OTP (One-Time Password) delivered to the user’s email account.
• Active Directory: Enter the user password of the linked Active Directory to authenticate.
• Knox Identity: Authenticate by entering the user password of the linked Knox Portal.
• Knox Messenger: Enter the Knox Messenger OTP received via the registered Knox Messenger to authenticate.
• PC SSO Agent: Install SingleID’s PC SSO Agent on a PC to perform integrated authentication (SSO) and unified logout across various web browsers, and to authenticate through PC security checks.
• SingleID Authenticator: SingleID dedicated authentication mobile app that supports biometrics (fingerprint, facial), PIN, mOTP, and TOTP.
• SMS: Enter the SMS OTP received on the registered mobile phone to authenticate.

• Passkey: Mobile Passkey, security key, a convenient authentication method that enables easy login with Windows biometric/PIN code.
• TOTP Authenticator: Enter the TOTP received via the registered authentication app or web extension to authenticate.

Authenticator list

We support all authenticators of the six supported types.

To check the Authenticator, please refer to the following path.

• Admin Portal > Integration > Authenticator

Add Authenticator

On the Authenticator list screen, clicking Register moves to the next screen, switching to a screen where you can add an Authenticator.

To add an Authenticator, follow the steps below.

1. Admin Portal > Integration > Authentictor > Add Click the button.
2. Each authentication methodselect > Next click the button.
3. Enter the information required for authentication settings.
4. Click the Save button.

Add Active Directory {#Active Directory-add}

Users can authenticate using the connected Active Directory.

To add Active Directory, follow the steps below.

1. Admin Portal > Integration > Authentictor > Add Click the button.
2. Select Active Directory > Click the Next button.
3. The General page appears. 3. Please review Authnticator Overview and click the Next button.
4. Settings page appears. 4. Enter the information to register Active Directory as an Authenticator.
5. After entering all information, click the Connection Test button to verify.
6. After checking everything, click the Save button.

Add Knox Identity

Users can authenticate using the connected Nox portal.

To add Knox Identity, follow the steps below.

1. Admin Portal > Integration > Authentictor > Add Click the button.
2. Select Knox Identity > Click the Next button.
3. General page appears. 3. Check the Authnticator Overview and click the Next button.
4. Policy page appears. 4. Enter the information to register Knox Identity as an Authenticator.
5. After entering all information, click the Connection Test button to verify.
6. After checking everything, click the Save button.

Add Knox Messenger

Enter the Knox Messenger OTP received via Knox Messenger to authenticate.

To add Knox Messenger, follow the steps below.

1. Admin Portal > Integration > Authentictor > Add Click the button.
2. Select Knox Messenger > Click the Next button.
3. General page appears. 3. Check the Authenticator Overview and click the Next button.
4. Policy page appears. 4. Enter the information required to register Knox Identity as an Authenticator.
5. After entering everything, click the Save button.

Add PC SSO Agent

To use SSO across multiple browsers, you can install the PC SSO Agent on the user’s PC.

To add the PC SSO Agent, follow the steps below.

1. Admin Portal > Integration > Authentictor > Add button, click it.
2. Select PC SSO Agent > Click the Next button.
3. General page appears. 3. Check the Authenticator Overview and click the Next button.
4. Policy page appears. 4. Enter the information required to register with the PC SSO Agent.
5. After entering everything, click the Save button.

Add SingleID Authenticator

Authenticate using the SingleID Authenticator mobile app provided by SingleID.

If you want to add the SingleID Authenticator, follow the steps below.

1. Admin Portal > Integration > Authentictor > Add Click the button.
2. Select SingleID Authenticator > Click the Next button.
3. The General page appears. 3. Please review the Authnticator Overview and click the Next button.
4. Policy page appears. Enter the information to register the SingleID Authenticator as an Authenticator.
5. After entering everything, click the Save button.

Add TOTP Authenticator

Enter the TOTP received through the registered authentication app or web extension to authenticate. You can use TOTP authentication methods to support 3rd Party Authenticators such as mobile authentication apps (Google Authenticator, Microsoft Authenticator, etc.) and web browser extensions (Chrome Web Store, Microsoft Edge Add-ons, etc.).

To add the TOTP Authenticator, follow the steps below.

1. Admin Portal > Integration > Authentictor > Add Click the button.
2. Select TOTP Authenticator > click the Next button.
3. General page appears. 3. Please review the Authenticator Overview and click the Next button.
4. Policy page appears. 4. Enter the information required to register with the TOTP Authenticator.
5. After entering everything, click the Save button.

Modify Authenticator

On the Authenticator list screen, after selecting an Authenticator and clicking Edit, it switches to the edit screen.

If you want to modify the Authenticator, follow the steps below.

1. Admin Portal > Integration > Authentictor > Edit button click
2. Edit each item, then click the Edit button to complete the changes.

Delete Authenticator

On the Authenticator list screen, select an Authenticator, disable it, then return to the settings screen, and you can delete it using the delete button in the three‑dot menu. You must exclude the authentication policy settings before disabling; otherwise, the disable cannot be applied.

To delete the Authenticator, follow the steps below.

1. Admin Portal > Integration > Authentictor List > Authenticator right three dots Click.
2. Disable popup click
3. If a warning popup appears, check the applied authentication policy.
4. To manage the lower authentication policy, please click here. Then click to exclude the policy from the authentication settings.
5. Deactivation is completed when the corresponding authentication policy is excluded from the authentication policy information.
6. After deactivation is complete, click the Authenticator and then click the Delete button.

MFA Service Provider

MFA Service Provider provides a service that enhances user convenience by applying biometric and simple authentication technologies along with strengthened authentication methods, meeting the security requirements required by enterprises through multi-factor authentication.

MFA Service Provider List

To view the list of MFA Service Providers, you can access the following menu.

• Admin Portal > Integration > MFA Service Provider

MFA Service Provider registration

To register the MFA Service Provider, follow the steps below.

1. Admin Portal > Integration > MFA Service Provider > Register Click the button
2. ADFS Federated Application or Custom Application or Network Equipment Select > Next Click the button

Through a three-step screen as shown below, you can enter the required information, configure it, and register the MFA Service Provider for integration.

• [General] {#General-3}
• [MFA integration] {#integration}
• [Owner] {#owner}

General

Enter general information for the MFA Service Provider.

MFA integration

Enter MFA integration information.

Owner

Select and register the person in charge of the newly registered MFA Service Provider.

When you click the Complete button, the registration is completed.

MFA Service Provider edit

On the MFA Service Provider list screen, after selecting an Authenticator and clicking Edit, you are taken to a screen where you can make modifications.

To modify the MFA Service Provider, follow the steps below.

1. Admin Portal > Integration > MFA Service Provider > Edit Click the button.
2. Edit each item, then click the Edit button to complete the changes.

Delete MFA Service Provider

After selecting an MFA Service Provider on the MFA Service Provider list screen, deactivate it, return to the list screen, and you can delete it from the three‑dot menu.

To delete the MFA Service Provider, follow the steps below.

1. Click Admin Portal > Integration > MFA Service Provider List > MFA Service Provider right three dots.
2. Delete Click the popup button.
3. If a warning popup appears, check the MFA Service Provider information.
4. Enter the MFA Service Provider name below and click the Delete button.