Integration

Integration is a service that configures and manages authentication services and account information for various applications.

In SCP SingleID, we support integration with new applications through customized authentication integration and account provisioning services, as well as a DIY (Do-It-Yourself) feature.

Through the integration menu, it provides integration management functions such as Application, Identity Provider, Authenticator, MFA Service Provider.

Application

The application management feature enables administrators to register, modify, and delete various SAML·OIDC·SCIM integrated applications, as well as assign users and groups and configure policies, all from a single location.

Application List

The administrator can select a registered application on the application list screen to edit/delete, sort, search, and so on, and can navigate to a menu screen where a new application can be added through registration.

To view the list of applications, access the menu as follows.

• Admin Portal > Integration > Application

Application Registration

The administrator can register the application by clicking the Register button on the list screen.

Application registration can be done using two methods: Custom App Integration and Pre-Built App Integration.

To register an application, access the menu as follows.

• Admin Portal > Integration > Application > Register button click
• Custom App Integration or Pre-Built App Integration Select Tab

Custom App Integration

Custom App Integration registration is the connection menu for authenticating the application you want to integrate and distributing accounts.

We provide three types of connection functions as follows.

When you want to register an application by linking authentication, you provide and select the type (SAML, OIDC) according to the standard authentication integration method.

When registering an application by linking account provisioning, we provide the standard online API method (SCIM).

To register the application Custom App Integration, follow the steps below.

1. Admin Portal > Integration > Application > Register button click
2. Custom App Integration > Web Application(SAML) orWeb Application(OIDC) or Identity Provisioning(SCIM v2.0) Select > Next Click button
3. Go to detailed settings

You can register an application by entering and configuring the information required for integration through a six-step screen as shown.

Applications using standard protocols (SAML, OIDC, SCIM) can register information and configure policies and attributes through a screen consisting of the following six steps.

1. General
2. SSO
3. Provisioning
4. Profile
5. Policy
6. Allocation

General

Enter the general application information by referring to the information below.

SSO

Enter Single Sign-On configuration information on the SSO input screen.

Provisioning

The Provisioning menu is an account management feature that can distribute user information to applications for synchronization. SingleID provides global standard API specifications such as SCIM and REST.

On the Provisioning information input screen, enter the configuration settings for account information distribution.

Profile

On the profile information entry screen, enter the configuration settings for User/Group for deployment.

After entering all items, click the Done button to complete the basic application setup. When you complete registering a new application, it is added to the application list, and new tabs called Policy, Assignment are created.

Policy

You can configure login policy and access control information for application policy settings.

allocation

Register information for assigning application users based on users and groups. This menu assigns access permissions by configuring the users and groups that can access the registered application.

To assign a user, follow the steps below.

1. When you click the application, you are taken to its detail page.
2. Click the Assign tab and then click the User tab > Assign button.
3. User Assignment When the popup window appears, select the user to assign, and click the Assign button.
4. In the Assignment tab, the selected user appears in the list.

Pre-Built App Integration

Pre-Built App Integration menu provides a convenient way to quickly and easily connect the desired SaaS application, by pre‑preparing necessary settings such as connection information, name, and icon, so you can use it immediately.

To integrate the application via Pre-Built App Integration, check the menu path below.

• Admin Portal > Integration > Application > Register > Pre-Built App Integration Click the tab
• Select Application > Next button click
• Go to detailed settings

Pre-Built App Integration menu can also register an application by entering the required integration information and configuring it through a six-step screen, just like the Custom App Integration menu.

The input items and methods for each step are the same, except for the information that has been predefined and entered for the Pre-Build.

1. [General] {#general-1}
2. [SSO] {#sso-1}
3. [Provisioning] {#provisioning-1}
4. [Profile]{#file-1}
5. [Policy] {#policy-1}
6. [allocation] {#configuration}

General

Enter the general application information by referring to the following.

SSO

Enter the Single Sign On configuration information on the SSO input screen.

Provisioning

The Provisioning menu is an account management feature that can distribute user information to applications for synchronization. SingleID provides global standard API specifications such as SCIM and REST.

On the Provisioning information input screen, enter the configuration settings for account information distribution.

Profile

On the profile information entry screen, enter the configuration settings for users/groups for deployment.

After entering all items, click the Done button to complete the basic application setup. When you complete registering a new application, it is added to the application list, and new tabs called Policy, Assignment are created.

Policy

You can set login policies and access control information for application policy configuration.

Allocation Settings

Register information for assigning application users based on users and groups. This menu assigns access permissions by configuring the users and groups that can access the registered application.

To assign a user, follow the steps below.

1. When you click the application, you will be taken to the application’s detail page.
2. Click the Assign tab and then click the User tab > Assign button.
3. User Assignment When the popup window appears, select the user to assign, and click the Assign button.
4. Assignment tab shows the selected user in the list.

Application modification

You can modify the settings by clicking the application on the list screen.

To modify the application, follow the steps below.

1. Click the Admin Portal > Integration > Select Application > Edit button.
2. Click the General, SSO, Provisioning, Policy, Assignment, Aggregation, Permission Items, Rebranding tab to edit the items you want to modify.
3. Click the Save button.

Permission item

Permission items synchronize by linking the user roles of the integrated application with SingleID.

Permission Item Registration

To set the permission items, follow the steps below.

1. When you click the application, you will be taken to the application’s detail page.
2. Click the Assignment tab and then click the Permission Items tab > Register button.
3. Permission item When the popup window appears, you need to register the permission item.
4. Enter Name, Key, Display Name, Content and click Save to register the permission.

Rebranding

A rebranding tab that does not appear during application registration is added. Rebranding of the application includes rebranding functionality for the login page when accessed as a separate application.

The included rebranding features are as follows.

• Favicon : The favicon can be edited in the browser.
• Header logo: The header logo on the login screen can be changed to the logo you want.
• Key visual image: The default key image on the login page can be modified.
• Sign‑up page redirection: Registration can be set to a separate operational sign‑up page instead of SingleID’s sign‑up page.
• Privacy Policy Redirection: You can register the privacy policy URL that was used in the existing application.
• Terms of Service redirection: You can register the Terms of Service URL that was used in the existing application.

UI

From the list screen, click the application, and in the Rebranding tab, click the Edit button to configure application‑specific rebranding settings for the UI.

Change favicon

In the application, you can set a custom favicon to match the specific characteristics of the corporate application.

To modify the favicon, follow the steps below.

1. Click the Admin Portal > Integration > Select Application > UI > Edit button.
2. Select custom in the Favicon item.
3. Favicon image (pencil shape) Click the item, then click the favicon image.
4. Upload an icon file or enter the icon image URL.
5. Click the Save button and use the preview screen to confirm that the upload was successful. 6.Korean page Enter the title in Korean.
6. English page Enter the title in English.
7. If the input is complete, verify through the right preview that it was entered correctly.
8. Click the Publish button at the lower right corner.

Change header logo

In the application, you can configure a separate header logo to suit the specific characteristics of the corporate application.

To modify the header logo, follow the steps below.

1. Admin Portal > Integration > Select Application > UI > Edit Click the button.
2. Select custom in the Header Logo item.
3. You can select and configure a text logo or an image logo.
4. Enter the Korean Redirect URL and the English Redirect URL.
5. If the input is complete, verify through the right preview that it was entered correctly.
6. Click the Publish button at the lower right corner.

Key visual change

In the application, separate key visual changes can be configured to suit the characteristics of corporate applications.

To edit the key visual, follow the steps below.

1. Admin Portal > Integration > Application Selection > UI > Edit Click the button.
2. In the Key Visual item, select Custom.
3. Click to use a single key visual for all languages and language-specific key visuals.
4. Once the image upload is complete, use the preview on the right to confirm that it was entered correctly.
5. Click the Publish button at the lower right corner.

Redirection

From the list screen, click the application, then in the Rebranding tab, click the Edit button to configure application‑specific rebranding settings for the redirect.

Sign up

User registration can configure a sign‑up link for each application.

Privacy Policy

The privacy policy can be redirected to the privacy policy URL link provided for each application.

Terms of Use

The terms of service can be redirected to the privacy policy URL link provided for each application.

Delete application

From the application list screen, select an application, deactivate it, return to the list screen, and delete it from the three‑dot menu.

Identity Provider

A menu for registering and managing IdPs that provide authentication services and credentials to SCP SingleID. At this point, SCP SingleID acts as a Service Provider and receives authentication services from the IdP.

Identity Provider list

On the list screen, you can select a registered Identity Provider to edit/delete, sort, search, etc., and you can navigate to a menu screen where you can register a new Identity Provider.

To check the Identity Provider list, you can access the following menu.

• Admin Portal > Integration > Identity Provider

Identity Provider registration

On the Identity Provider list screen, you can register by clicking Register at the top.

To register an Identity Provider, follow the steps below.

1. Admin Portal > Integration > Identity Provider > Register button click
2. Custom App Integration > Web Application(SAML) or Web Application(OIDC) Select > Next Click the button
3. Go to detailed settings

You can register an Identity Provider by entering the required integration information and configuring it through a three-step screen as follows.

• [General] {#general-2}
• [SSO] {#sso-2}
• [JIT provisioning] {#jit}

General

Enter general information for the IdP (Identity Provider).

SSO

On the SSO information entry screen, enter the Single Sign On configuration information.

When integrating with a Web Application (OIDC)

JIT provisioning

The JIT provisioning feature tab has been added to the Identity Provider. This feature synchronizes the account in real time when a user’s changes occur. You can configure items when synchronizing the account in real time.

After entering all items, click the Complete button to finish the basic application setup.

Identity Provider modify

You can modify the settings by clicking the Identity Provider on the list screen.

If you want to modify the Identity Provider, follow the steps below.

1. Admin Portal > Integration >Identity Provider Select > Edit Click the button.
2. Click the General, SSO, Provisioning, Policy, Assignment tab to edit the items you want to modify.
3. Click the Save button.

Identity Provider Delete

On the Identity Provider list screen, select an Identity Provider, deactivate it, then return to the list screen and delete it from the three‑dot menu. If you want to register again, click the Add button to register.

Authenticator

Integrate and configure the Authenticator provided by SCP SingleID. By default, passwords and Email are enabled.

The types and functions of Authenticators are as follows.

• Password: Password Authenticator verifies the password known only to the user to authenticate the user, serving as a knowledge-based authentication method. * It is the built‑in Authenticator used for primary and secondary authentication, and it cannot be deleted or disabled for security reasons.
• Email: A ownership-based authentication method that authenticates the user through an OTP (One-Time Password) sent to the email account owned by the user.
• Active Directory: Enter the user password of the linked Active Directory to authenticate.
• Knox Identity: Authenticate by entering the user password of the linked Knox Portal.
• Knox Messenger: Enter the Knox Messenger OTP received through the registered Knox Messenger to authenticate.
• PC SSO Agent: Install SingleID’s PC SSO Agent on the PC to perform integrated authentication (SSO) and unified logout across various web browsers, and conduct authentication through PC security checks.
• SingleID Authenticator: It is a SingleID‑dedicated authentication mobile app that supports biometrics (fingerprint, facial), PIN, mOTP, and TOTP.
• SMS: Enter the SMS OTP received on the registered mobile phone to authenticate.

• Passkey: Mobile Passkey, security key, a convenient authentication method that enables easy login with Windows biometric/PIN code.
• TOTP Authenticator: Enter the TOTP received via a registered authentication app or web extension to authenticate.

Authenticator list

We support all six available Authenticator types.

To check the Authenticator, please refer to the following path.

• Admin Portal > Integration >Authenticator

Add Authenticator

On the Authenticator list screen, clicking Register navigates to the next screen, where you can add an Authenticator.

To add an Authenticator, follow the steps below.

1. Admin Portal > Integration > Authentictor > Add Click the button.
2. Each authentication methodselect > Next click the button.
3. Enter the information required for authentication settings.
4. Click the Save button.

Add Active Directory

Users can authenticate using the connected Active Directory.

To add Active Directory, follow the steps below.

1. Admin Portal > Integration > Authentictor > Add Click the button.
2. Select Active Directory > Click the Next button.
3. General page appears. 3. Authnticator Overview please review and click the Next button.
4. Settings page appears. 4. Enter the information required to register Active Directory as an Authenticator.
5. After entering all information, click the Connection Test button to verify.
6. After confirming everything, click the Save button.

Add Knox Identity

Users can authenticate using the connected Nox portal.

To add Knox Identity, follow the steps below.

1. Admin Portal > Integration > Authentictor > Add Click the button.
2. Select Knox Identity > Click the Next button.
3. General page appears. 3. Authnticator Overview please check and click the Next button.
4. The Policy page appears. 4. Enter the information required to register Knox Identity as an Authenticator.
5. After entering all information, click the Connection Test button to verify.
6. After checking everything, click the Save button.

Add Knox Messenger

Enter the Knox Messenger OTP received via Knox Messenger to authenticate.

To add Knox Messenger, follow the steps below.

1. Admin Portal > Integration > Authentictor > Add Click the button.
2. Select Knox Messenger > Click the Next button.
3. General page appears. 3. Check the Authenticator Overview and click the Next button.
4. Policy page appears. 4. Enter the information required to register Knox Identity as an Authenticator.
5. After entering everything, click the Save button.

Add PC SSO Agent

To use SSO across multiple browsers, you can install the PC SSO Agent on the user’s PC.

To add the PC SSO Agent, follow the steps below.

1. Admin Portal > Integration > Authentictor > Add Click the button.
2. Select PC SSO Agent > Click the Next button.
3. General page appears. 3. Please check the Authnticator Overview and click the Next button.
4. Policy page appears. 4. Enter the information required to register with the PC SSO Agent.
5. After entering everything, click the Save button.

Add SingleID Authenticator

Authenticate using the SingleID Authenticator mobile app provided by SingleID.

To add the SingleID Authenticator, follow the steps below.

1. Admin Portal > Integration > Authentictor > Add Click the button.
2. Select SingleID Authenticator > click the Next button.
3. General page appears. 3. Check the Authnticator Overview and click the Next button.
4. Policy The page appears. Enter the information to register the SingleID Authenticator as an Authenticator.
5. After entering everything, click the Save button.

Add TOTP Authenticator

Enter the TOTP received through the registered authentication app or web extension to authenticate. You can use TOTP authentication methods to support 3rd Party Authenticators such as mobile authentication apps (Google Authenticator, Microsoft Authenticator, etc.) and web browser extensions (Chrome Web Store, Microsoft Edge Add‑ons, etc.).

To add the TOTP Authenticator, follow the steps below.

1. Admin Portal > Integration > Authentictor > Add Click the button.
2. Select TOTP Authenticator > Click the Next button.
3. General page appears. 3. Check the Authnticator Overview and click the Next button.
4. Policy page appears. 4. Enter the information required to register with the TOTP Authenticator.
5. After entering everything, click the Save button.

Modify Authenticator

On the Authenticator list screen, after selecting an Authenticator and clicking Edit, you will be taken to the edit screen.

If you want to modify the Authenticator, follow the steps below.

1. Admin Portal > Integration > Authentictor > Edit button click
2. Edit each item, then click the Edit button to complete the modification.

Delete Authenticator

On the Authenticator list screen, select an Authenticator, deactivate it, then return to the settings screen, and you can delete it using the delete button in the three‑dot menu. To apply the disable, you must exclude the authentication policy settings before disabling.

To delete the Authenticator, follow the steps below.

1. Admin Portal > Integration > Authentictor List > Authenticator Right Three Dots click.
2. Click Disable popup
3. If a warning popup appears, check the applied authentication policy.
4. To manage the lower authentication policy, please click here. Click and exclude the policy from the authentication policy.
5. Deactivation is completed when the relevant authentication policy is excluded from the authentication policy information.
6. After deactivation is complete, click the Authenticator and then click the Delete button.

MFA Service Provider

MFA Service Provider provides a service that enhances user convenience by applying biometric and simple authentication technologies along with strengthened authentication methods, meeting the security requirements required by enterprises through multi-factor authentication.

MFA Service Provider list

To view the list of MFA Service Providers, you can access the following menu.

• Admin Portal > Integration > MFA Service Provider

MFA Service Provider registration

To register the MFA Service Provider, follow the steps below.

1. Admin Portal > Integration > MFA Service Provider > Register button click
2. Click the ADFS Federated Application or Custom Application or Network Equipment selection > Next button

You can register an MFA Service Provider by entering the required information and configuring it through a three-step screen as shown.

• [General] {#General-3}
• [MFA integration] {#integration}
• [Owner] {#owner}

General

Enter general information for the MFA Service Provider.

MFA integration

Enter MFA integration information.

Owner

Select the person responsible for the newly registered MFA Service Provider and register them.

Click the Complete button to complete the registration.

MFA Service Provider modification

After selecting an Authenticator on the MFA Service Provider list screen and clicking Edit, you will be taken to a screen where you can modify it.

If you want to modify the MFA Service Provider, follow the steps below.

1. Admin Portal > Integration > MFA Service Provider > Edit Click the button.
2. Edit each item, then click the Edit button to complete the modification.

MFA Service Provider Delete

After selecting an MFA Service Provider on the MFA Service Provider list screen and disabling it, return to the list screen where you can delete it from the three‑dot menu.

To delete the MFA Service Provider, follow the steps below.

1. Admin Portal > Integration > MFA Service Provider List > MFA Service Provider right three dots Click.
2. Delete Click the popup button.
3. If a warning popup appears, check the MFA Service Provider information.
4. Enter the MFA Service Provider name below and click the Delete button.