SAML SSO Authentication for PCI Compliance

PCI Compliance supports the Identity Provider (IdP) initiated Security Assertion Markup Language Single Sign-on (SAML SSO) authentication. SAML SSO provides secure and easy access to Qualys PCI Compliance using your corporate credentials. This ensures authorized access to PCI compliance by mapping each user to the specific access token.

Contact Qualys Support to activate SAML SSO for the Point of Contact (POC) user. Only the POC users can enable or disable SAML SSO for sub-users.

How to Enable SAML SSO for PCI Bank

To enable SAML SSO for a bank, you need to share your account details with Qualys Support.

Perform the following steps to enable SAML SSO for the bank.

• Contact Qualys Support and share the bank login details. Qualys Support enables SAML SSO for the bank once they receive the required details.
• Once the SAML SSO is enabled for the bank, you can enable it for the individual users.

Perform the following steps to enable SAML SSO for the bank at the user level.

• In the PCI Compliance application, log in to the bank for which SAML is enabled.
• Navigate to Account > Users.
• Select the user account for which you want to enable SAML.
• Click Edit and select the Enable SAML checkbox.
• Enter the External ID for the user.
• Click  Save.
• Once you enable SAML for a user, contact Qualys Support and provide the following details:
  • Bank user login details
  • External ID
  • Login URL
  • Logout URL
  • Base Certificate
  Using these details, Qualys Support generates the IdM UUID and adds it to the login and logout URLs. You can use these URLs to integrate SAML with Okta or Azure applications.

How to Use SAML SSO for PCI Bank Login

Once the SAML SSO is enabled for the Bank and bank users, you need to integrate it with your Azure or Okta accounts. To learn more about SAML integration, refer to PCI Compliance SAML Integration with Okta and PCI Compliance SAML Authentication with Azure.

If SAML is not enabled for the bank, you cannot enable it at the user level.

To access the PCI Bank account, log in to your Okta or Azure account using the login URL and your account credentials. You can directly navigate to PCI Bank account from the Okta or Azure. 

How to Generate SAML SSO Token

When enabling the SAML-SSO for a user, select the Generate Token checkbox. It generates a SAML authentication token. You can use this token to set up SSO for the bank or link a bank account to VM.

Perform the following steps to generate the SAML SSO token:

1. Log in to the SAML-enabled account from your IdP.
2. Navigate to the Account > Users > Edit User window.
3. In the Edit User window, click Generate Link Token. The Generate VM Linking Token window opens.
4. Copy the generated token. This token is required to link the PCI account with the VM user. Once the PCI account is linked to the VM account, you cannot regenerate the token for the same user.