Webchat SSO-SAML and OAuth2-SSO Integration with Auth0

This topic discusses two ways that you can set up SSO options via the Auth0 application.

In the Auth0 Dashboard:

1. Login to Auth0 dashboard https://manage.auth0.com/dashboard/

2. Navigate to Dashboard > Applications > Applications.

3. Click on + Create Application.

Creating Auth0 Applications

Choose one of the following two SSO options for Webchat:

• SSO-SAML (Auth0)

• OAuth2 - SSO (Auth0)

To set up SSL-SAML (Auth0)

1. Set your apps Name and Select “Regular Web Applications”

4. Go directly to the Settings tab

5. Go to section “Application URIs” and set the required value in Allowed Callback URLs

Callback URLs need to be in the syntax: {vanityUrl}/aisera/ssoLoginCallback,

such as: https://acme.chatbot.aisera.cloud/aisera/ssoLoginCallback

6. Scroll to “Advanced Settings” and select the tab “Endpoints”

7. Copy the SAML Protocol URL

8. Move to the “Certificates” tab and copy the “Signing Certificate”

Setting up SSO for a channel in Admin Console

1. Open Aisera Admin UI and go to Settings > Channels > New Channel to set up a new Webchat channel

2. Under the Authentication tab, select SSO and provide: Login URL: SAML Protocol URL ACS URL: The identity provider's SSO URL used by Aisera to authenticate. Issuer: The Aisera Entity ID. If none specified, it is generated based on the cluster as 'aisera-saml-{clusterType}'. (such as, aisera-saml-staging or aisera-saml-prod) IFrame embedding: If checked then the SSO authentication form is displayed in the same window instead of opening a separate one. You may need to configure the identity provider to allow iframe embedding for this to work. Skip compression: If checked, the SAML request from Aisera will not be compressed. x509 Certificate: Signing Certificate

Finish the channel setup and add the channel to an Aisera App

1. Select Settings > Channels, and choose your Webchat channel.

2. Choose the pencil icon to open the Edit Channel window.

Webchat Details Window

3. Fill in the remaining values for the SSO section and click OK.

To set up SSO-OAuth2 (Auth0)

1. Set your apps Name and Select Single Page Applications.

Auth0 Application Types

1. Go to the Settings tab

1. Go to section “Application URIs” and set the <vanityUrl> as value in Allowed Callback URLs. Need to be in the form of such as, https://acme.chatbot.aisera.cloud/

1. In Cross-Origin Authentication enable Allow Cross-Origin Authentication and set the vanity URL as value in Allowed Origins (CORS)

Allow Cross-Origin Communication

1. IMPORTANT!: In order to allow Cross-Origin Authentication the Universal Login Experience needs to be set to “Classic”.

2. Go to Branding > Universal Login Settings and select Classic.

Universal Login

1. Open Aisera Admin UI and go to Settings > Channels > New Channel to setup a new webchat channel.

2. In Authentication select SSO-Auht0 and provide

   • Domain: Copy from Auth0 > App > Settings

   • Client ID: Copy from Auth0 > App > Settings

OAuth2-SSO Option

1. Finish the channel setup and add the channel to an Aisera App