Integrate custom apps

    A custom application is an application you configure for SSO yourself because it is not in Identity360's built-in integration catalog. These are usually web applications your organization built in-house, such as internal portals, admin consoles, and deployment or operations tools, along with third-party web applications that are not in the catalog yet. Custom applications support single sign-on (SSO), so users authenticate once and then open the application directly from their applications portal in a single click, without entering separate credentials. You integrate a custom application using one of three SSO methods: SAML, OAuth/OpenID Connect, or Bookmark, and then assign the application to the specific users and groups who need it.

    Adding a custom application

    To add and configure a custom application:

    1. Go to Applications > Application Integration, and click Custom Application.
    2. On the General Settings tab, enter an Application Name. Optionally, add a Description and upload a Logo Icon (JPG, JPEG, or PNG, up to 100x100 pixels and 250KB).
    3. Under Choose Capabilities, select Single Sign-on, and click Continue.
    4. On the Integration Settings tab, select an SSO Method, and complete the configuration for the method you choose:
      • SAML: Standards-based SSO that exchanges signed SAML 2.0 assertions with the application. It supports SP-initiated and IdP-initiated flows, and you configure it with the application's metadata file, or with its SAML URL and ACS URL (plus its Entity ID for IdP-initiated SSO). You can also set advanced provider settings such as the signing algorithm, SAML response signing, canonicalization method, and NameID format. For the full procedure, see SAML app integration.
      • OAuth/OpenID Connect: Token-based SSO that issues an ID token and an access token to the application. It supports SP-initiated and IdP-initiated flows, with options for client authentication, key algorithm, access token validity, and refresh tokens. For the full procedure, see OAuth/OpenID Connect app integration.
      • Bookmark: Saves the application's login URL for one-click access from the portal, which suits legacy or non-SAML/OAuth applications. It opens the application's login page but does not sign users in automatically, so they still complete the application's own authentication. For the full procedure, see Bookmark app integration.
    5. Click Save.

    The custom application is added and listed under your configured applications, where you can edit its configuration, enable or disable it, or delete it.

    Assigning the application to end users

    A custom application is available only to the users and groups you assign to it. To grant access, go to Applications > Single Sign-on, locate the application in the SSO Configured Applications list, and use the Assigned To column to add the users and groups who should be able to access it. Assigned users can then open the application from their applications portal.