Integration

Integration is a service that configures and manages authentication services and account information for various applications.

In SCP SingleID, we support integration with new applications through customized authentication integration and account provisioning services, as well as the DIY (Do-It-Yourself) feature.

Through the integration menu, it provides integration management functions such as Application, Identity Provider, Authenticator, MFA Service Provider.

Application

The application management feature enables administrators to register, modify, and delete various SAML·OIDC·SCIM integrated applications, as well as assign users and groups and configure policies all in one place.

Application List

Administrators can select a registered application on the application list screen to edit, delete, sort, search, and so on, and can navigate to a menu screen where they can register a new application.

To view the list of applications, access the menu as follows.

• Admin Portal > Integration > Application

Application registration

The administrator can register the application by clicking the Register button on the list screen.

Application registration can be done using two methods: Custom App Integration and Pre-Built App Integration.

To register an application, access the menu as follows.

• Admin Portal > Integration > Application > Register Click button
• Custom App Integration or Pre-Built App Integration Select Tab

Custom App Integration

Custom App Integration registration is a connection menu for authenticating the application you wish to integrate and distributing accounts.

We offer three types of connection functions as follows.

When registering an application by linking authentication, you provide and select the type (SAML, OIDC) according to the standard authentication integration method.

When registering an application by linking account provisioning, we provide the standard online API method (SCIM).

To register the application Custom App Integration, follow the steps below.

1. Admin Portal > Integration > Application > Register Click the button
2. Custom App Integration > Web Application(SAML) orWeb Application(OIDC) or Identity Provisioning(SCIM v2.0) Select > Next Click the button
3. Go to detailed settings

You can register an application by entering and configuring the information required for integration through a six-step screen as shown below.

Applications using standard protocols (SAML, OIDC, SCIM) can register information and configure policies and attributes through a screen consisting of the following six steps.

1. General
2. SSO
3. Provisioning
4. Profile
5. Policy
6. Allocation

General

Enter the general application information by referring to the following.

SSO

Enter the Single Sign On configuration information on the SSO information entry screen.

Provisioning

The Provisioning menu is an account management feature that can distribute user information to applications for synchronization. SingleID provides global standard API specifications such as SCIM and REST.

Enter the configuration information for account information distribution on the Provisioning information input screen.

Profile

On the profile information entry screen, enter the configuration settings for User/Group for deployment.

After entering all items, click the Complete button to complete the basic application settings. When you complete registering a new application, it is added to the application list, and new tabs called Policy, Assignment are created.

Policy

You can configure login policy and access control information for application policy settings.

Allocation

Register information for assigning application users based on users and groups. This menu assigns access permissions by configuring the users and groups that can access the registered application.

To assign a user, follow the steps below.

1. When you click the application, you will be taken to the application’s detail page.
2. Click the Assign tab and then click the User tab > Assign button.
3. User Assignment popup appears, select the user to assign, and click the Assign button.
4. In the Assignment tab, the selected user appears in the list.

Pre-Built App Integration

Pre-Built App Integration menu provides a convenient way to quickly connect and use the desired SaaS application by pre‑preparing necessary settings such as connection information, name, icon, and other required configurations.

To integrate the application using Pre-Built App Integration, refer to the menu path below.

• Admin Portal > Integration > Application > Register > Pre-Built App Integration Click tab
• Select Application > Next button click
• Go to detailed settings

The Pre-Built App Integration menu, like the Custom App Integration menu, allows you to register an application by entering the required integration information and configuring it through a six-step screen as shown below.

The input items and methods for each step are the same, except for the information that has been predefined and entered for Pre‑Built.

1. [General] {#general-1}
2. [SSO] {#sso-1}
3. [Provisioning] {#provisioning-1}
4. [Profile]{#file-1}
5. [Policy] {#policy-1}
6. [Assignment] {#configuration}

General

Enter the general application information by referring to the following.

SSO

Enter the Single Sign On configuration information on the SSO information entry screen.

Provisioning

The Provisioning menu is an account management feature that can distribute user information to applications for synchronization. SingleID provides global standard API specifications such as SCIM and REST.

Enter the configuration settings for distributing account information on the Provisioning information input screen.

Profile

On the profile information entry screen, enter the user/group settings for deployment.

After filling in all fields, click the Complete button to finish the basic application setup. When you complete registering a new application, it is added to the application list, and new tabs called Policy, Assignment are created.

Policy

You can configure login policies and access control information for application policy settings.

Allocation Settings

Register information for assigning application users based on users and groups. This menu assigns access permissions by configuring the users and groups that can access the registered application.

To assign a user, follow the steps below.

1. When you click the application, you will be taken to the application’s detail page.
2. Click the Assign tab, then click the User tab > Assign button.
3. User Assignment When the popup appears, select the user you want to assign, and click the Assign button.
4. Assignment tab shows the selected user in the list.

Edit Application

From the list screen, you can modify the settings by clicking the application.

To modify the application, follow the steps below.

1. Admin Portal > Integration > Select Application > Edit Click the button.
2. General, SSO, Provisioning, Policies, Assignment, Aggregation, Permission items, Rebranding tab, click to edit the items you want to modify.
3. Click the Save button.

Permission item

Permission items provide synchronization by linking the user roles of the integrated application with SingleID.

Register permission item

To configure permission items, follow the steps below.

1. When you click the application, you will be taken to its detail page.
2. Click the Assignment tab and then click the Permission Items tab > Register button.
3. Permission item When the popup appears, you must register the permission item.
4. Enter Name, Key, Display Name, Content and click Save to register the permission.

Rebranding

A rebranding tab that does not appear during application registration is added. Rebranding of the application includes login page rebranding functionality when accessed as a separate application.

The included rebranding features are as follows.

• Favicon: The favicon can be modified in the browser.
• Header logo: The header logo on the login screen can be changed to the logo you want.
• Key visual image: The default key image on the login page can be modified.
• Sign‑up page redirection: Registration can be directed to a separate operational sign‑up page rather than SingleID’s sign‑up page.
• Privacy Policy Redirection: You can register the privacy policy URL used in the existing application.
• Terms of Service redirection: You can register the Terms of Service URL previously used in the existing application.

UI

From the list screen, click the application, then in the Rebranding tab, click the Edit button to configure application‑specific rebranding settings for the UI.

Change favicon

In the application, you can set a custom favicon to match the specific characteristics of the enterprise application.

To modify the favicon, follow the steps below.

1. Click the Admin Portal > Integration > Select Application > UI > Edit button.
2. Select custom in the Favicon item.
3. Click the Favicon image (pencil shape) item, then click the favicon image.
4. Upload an icon file or enter the icon image URL.
5. Click the Save button and use the preview screen to confirm that the upload was successful. 6.Korean page Enter the title in Korean.
6. English page Enter the title in English.
7. Once the input is complete, use the preview on the right to confirm that it was entered correctly.
8. Click the Publish button at the lower right corner.

Header logo change

In the application, you can configure separate header logo changes to match the characteristics of the corporate application.

To edit the header logo, follow the steps below.

1. Admin Portal > Integration > Application Selection > UI > Edit Click the button.
2. Select custom in the Header logo item.
3. You can select and set a text logo or an image logo.
4. Enter the Korean Redirect URL and the English Redirect URL.
5. Once the input is complete, use the preview on the right to confirm that it was entered correctly.
6. Click the Publish button at the lower right corner.

Key visual change

In the application, separate key visual changes can be configured to suit the characteristics of the corporate application.

To edit the key visual, follow the steps below.

1. Admin Portal > Integration > Application Selection > UI > Edit Click the button.
2. In the Key Visual item, select Custom.
3. Click to use a single key visual for all languages and language-specific key visuals.
4. If the image upload is complete, verify through the preview on the right that it was entered correctly.
5. Click the Publish button at the lower right corner.

Redirection

From the list screen, click the application, then in the Rebranding tab, click the Edit button to configure application‑specific rebranding settings for the redirect.

Sign up

Sign-up allows you to configure a registration link for each application.

Privacy Policy

The privacy policy can be redirected to the URL link of the privacy policy provided for each application.

Terms of Use

The Terms of Service can be redirected to the privacy policy URL link provided for each application.

Delete application

On the application list screen, select the application, deactivate it, then return to the list screen and you can delete it from the three‑dot menu.

Identity Provider

A menu for registering and managing IdPs that provide authentication services and credentials to SCP SingleID. At this point, the SCP SingleID acts as a Service Provider and receives authentication services from the IdP.

Identity Provider list

On the list screen, you can select a registered Identity Provider to edit/delete, sort, search, etc., and you can navigate to a menu screen where you can register a new Identity Provider.

To view the Identity Provider list, you can access the following menu.

• Admin Portal > Integration > Identity Provider

Identity Provider registration

On the Identity Provider list screen, you can register by clicking Register at the top.

To register an Identity Provider, follow the steps below.

1. Admin Portal > Integration > Identity Provider > Register Click the button
2. Custom App Integration > Web Application(SAML) or Web Application(OIDC) Select > Next Click the button
3. Go to detailed settings

You can register an Identity Provider by entering and configuring the required integration information through a three-step screen as follows.

• [General] {#General-2}
• [SSO] {#sso-2}
• [JIT provisioning] {#jit}

General

Enter general information for IdP (Identity Provider).

SSO

Enter the Single Sign On configuration information on the SSO information entry screen.

When integrating with a Web Application (OIDC)

JIT provisioning

Identity Provider’s JIT provisioning feature tab has been added. This feature synchronizes the account in real time when a user’s changes occur. You can configure items when the account is synchronized in real time.

After filling in all fields, click the Complete button to finish the basic application setup.

Modify Identity Provider

You can edit the settings by clicking the Identity Provider on the list screen.

If you want to modify the Identity Provider, follow the steps below.

1. Click the Admin Portal > Integration >Identity Provider Selection > Edit button.
2. Click the General, SSO, Provisioning, Policy, Assignment tab to edit the items you want to modify.
3. Click the Save button.

Delete Identity Provider

On the Identity Provider list screen, select an Identity Provider, deactivate it, then return to the list screen where you can delete it from the three‑dot menu. To register again, click the Add button.

Authenticator

Configure by integrating the Authenticator provided by SCP SingleID. By default, passwords and Email are enabled.

The types and functions of Authenticators are as follows.

• Password: Password Authenticator verifies a password known only to the user to authenticate the user, serving as a knowledge‑based authentication method. * It is the built‑in Authenticator used for primary and secondary authentication, and it cannot be deleted or disabled for security reasons.
• Email: It is an ownership-based authentication method that verifies the user through an OTP (One-Time Password) delivered to the email account owned by the user.
• Active Directory: Enter the user password of the linked Active Directory to authenticate.
• Knox Identity: Enter the user password of the linked Knox Portal to authenticate.
• Knox Messenger: Enter the Knox Messenger OTP received via the registered Knox Messenger to authenticate.
• PC SSO Agent: Install SingleID’s PC SSO Agent on the PC to perform integrated authentication (SSO) and unified logout across various web browsers, and conduct authentication through PC security checks.
• SingleID Authenticator: SingleID dedicated authentication mobile app that supports biometrics (fingerprint, facial), PIN, mOTP, and TOTP.
• SMS: Enter the SMS OTP received on the registered mobile phone to authenticate.

• Passkey: Mobile Passkey, security key, a convenient authentication method that enables easy login with Windows biometric/PIN code.
• TOTP Authenticator: Enter the TOTP received via a registered authentication app or web extension to authenticate.

Authenticator list

We support all authenticators of the six supported types.

To check the Authenticator, please refer to the following path.

• Admin Portal > Integration > Authenticator

Add Authenticator

On the Authenticator list screen, clicking Register moves to the next screen, which transitions to a screen where you can add an Authenticator.

To add an Authenticator, follow the steps below.

1. Admin Portal > Integration > Authentictor > Add Click the button.
2. each authentication methodselect > next click the button.
3. Enter the information required for authentication settings.
4. Click the Save button.

Add Active Directory {#Active Directory-add}

Users can authenticate using the connected Active Directory.

To add Active Directory, follow the steps below.

1. Click the Admin Portal > Integration > Authentictor > Add button.
2. Select Active Directory > Click the Next button.
3. General page appears. 3. Please review Authnticator Overview and click the Next button.
4. Settings page appears. 4. Enter the information required to register Active Directory as an Authenticator.
5. After entering all information, click the Connection Test button to verify.
6. After checking everything, click the Save button.

Add Knox Identity

Users can authenticate using the connected Nox portal.

To add Knox Identity, follow the steps below.

1. Admin Portal > Integration > Authentictor > Add Click the button.
2. Select Knox Identity > Click the Next button.
3. General page appears. 3. Check the Authnticator Overview and click the Next button.
4. Policy page appears. 4. Enter the information required to register Knox Identity as an Authenticator.
5. After entering all information, click the Connection Test button to verify.
6. After checking everything, click the Save button.

Add Knox Messenger

Enter the Knox Messenger OTP received via Knox Messenger to authenticate.

To add Knox Messenger, follow the steps below.

1. Admin Portal > Integration > Authentictor > Add Click the button.
2. Select Knox Messenger > click the Next button.
3. General page appears. 3. Please review Authnticator Overview and click the Next button.
4. Policy page appears. 4. Enter the information required to register Knox Identity as an Authenticator.
5. After entering everything, click the Save button.

Add PC SSO Agent

To use SSO across multiple browsers, you can install the PC SSO Agent on the user’s PC.

To add the PC SSO Agent, follow the steps below.

1. Admin Portal > Integration > Authentictor > Add Click the button.
2. Select PC SSO Agent > Click the Next button.
3. General page appears. 3. Please review Authnticator Overview and click the Next button.
4. Policy page appears. 4. Enter the information required to register with the PC SSO Agent.
5. After entering everything, click the Save button.

Add SingleID Authenticator

Authenticate using the SingleID Authenticator mobile app provided by SingleID.

To add the SingleID Authenticator, follow the steps below.

1. Admin Portal > Integration > Authentictor > Add Click the button.
2. Select SingleID Authenticator > Click the Next button.
3. General page appears. 3. Please review Authnticator Overview and click the Next button.
4. Policy page appears. Enter the information to register the SingleID Authenticator as an Authenticator.
5. After entering everything, click the Save button.

Add TOTP Authenticator

Enter the TOTP received through the registered authentication app or web extension to authenticate. You can use TOTP authentication methods to support 3rd Party Authenticators such as mobile authentication apps (Google Authenticator, Microsoft Authenticator, etc.) and web browser extensions (Chrome Web Store, Microsoft Edge Add-ons, etc.).

If you want to add the TOTP Authenticator, follow the steps below.

1. Admin Portal > Integration > Authentictor > Add Click the button.
2. Select TOTP Authenticator > click the Next button.
3. General page appears. 3. Check the Authnticator Overview and click the Next button.
4. Policy page appears. 4. Enter the information needed to register with the TOTP Authenticator.
5. After entering everything, click the Save button.

Modify Authenticator

On the Authenticator list screen, after selecting an Authenticator and clicking Edit, it switches to the edit screen.

To modify the Authenticator, follow the steps below.

1. Admin Portal > Integration > Authentictor > Edit Click button
2. Edit each item, then click the Edit button to complete the changes.

Delete Authenticator

On the Authenticator list screen, select the Authenticator, deactivate it, then return to the settings screen, and you can delete it via the delete button in the three‑dot menu. To apply the disable, you must exclude the authentication policy settings before deactivating.

To delete the Authenticator, follow the steps below.

1. Admin Portal > Integration > Authenticator List > Authenticator right three dots Click.
2. Disable popup click
3. If a warning popup appears, check the applied authentication policy.
4. To manage the lower authentication policy, please click here. Click to exclude the policy from the authentication settings.
5. Deactivation is completed when the corresponding authentication policy is excluded from the authentication policy information.
6. After deactivation is complete, click the Authenticator and then click the Delete button.

MFA Service Provider

MFA Service Provider provides a service that enhances user convenience by applying biometric and simple authentication technologies along with strengthened authentication methods, meeting the security requirements required by enterprises through multi-factor authentication.

MFA Service Provider List

To view the list of MFA Service Providers, you can access the following menu.

• Admin Portal > Integration > MFA Service Provider

MFA Service Provider registration

To register the MFA Service Provider, follow the steps below.

1. Admin Portal > Integration > MFA Service Provider > Register Click the button
2. ADFS Federated Application or Custom Application or Network Equipment Select > Next Click the button

You can register an MFA Service Provider by entering and configuring the required information for MFA Service Provider integration through a three-step screen as shown.

• [General] {#General-3}
• [MFA integration] {#integration}
• [Owner] {#owner}

General

Enter general information for the MFA Service Provider.

MFA integration

Enter MFA integration information.

Owner

Select the person responsible for the newly registered MFA Service Provider and register them.

When you click the Complete button, registration is completed.

MFA Service Provider Modification

On the MFA Service Provider list screen, after selecting an Authenticator and clicking Edit, you will be taken to a screen where you can make changes.

To modify the MFA Service Provider, follow the steps below.

1. Admin Portal > Integration > MFA Service Provider > Edit Click the button.
2. Edit each item, then click the Edit button to complete the edit.

Delete MFA Service Provider

On the MFA Service Provider list screen, after selecting an MFA Service Provider and disabling it, return to the list screen and you can delete it from the three‑dot menu.

To delete the MFA Service Provider, follow the steps below.

1. Admin Portal > Integration > MFA Service Provider List > Right three dots of MFA Service Provider Click.
2. Click the Delete popup button.
3. If a warning popup appears, check the MFA Service Provider information.
4. Enter the MFA Service Provider name below and click the Delete button.