Steps to configure SAML SSO for Prophix

About Prophix

Prophix is corporate performance management software that helps organizations automate and streamline their financial planning, budgeting, forecasting, reporting, and analysis processes.

The following steps will help you enable SSO for Prophix software from Identity360.

Prerequisites

1. The MFA and SSO license for Identity360 is required to enable SSO for enterprise applications.
2. Log in to Identity360 as an Admin, Super Admin, or Technician with a role that has Application Integration and Single Sign-on permissions.
3. Navigate to Applications > Application Integration > Create New Application, and select Prophix from the applications displayed.
   Note: You can also find Prophix from the search bar located at the top.
4. Under the General Settings tab, enter the Application Name and Description.
5. Under the Choose Capabilities tab, select the Single Sign-on check box and click Continue.
   General Settings of SSO configuration for Prophix
6. Under Integration Settings, navigate to the Single Sign On tab, and click IdP Details. You can configure Prophix by either uploading the metadata file or entering the details manually.
   • For uploading metadata file: Download the metadata file to be uploaded during the configuration of Prophix in Identity360 by clicking Download from the Metadata field.
   • For manual configuration: Copy the Login URL and Issuer URL. Click Download from the Signing Certificate field.
   Integration Settings of SSO configuration for Prophix.

Prophix (service provider) configuration steps

1. Log in to Prophix as an administrator.
2. In the FP&A tab, go to Security Manager, and select Tools > Single Sign On Settings.
3. In the Base URL field, enter your Prophix account Login URL. For example, https://bennetrox.prophix.cloud.
4. For SSO configuration, you can either enter details manually or choose to upload metadata for auto-configuration.
   • For Metadata upload:
     • Under Autofill with Metadata File, in the File field, click the Import button and upload the Metadata file downloaded in step six (i) of the prerequisites.
   • For Manual configuration:
     • Under SSO Configuration, in the SAML SSO URL field, paste the Login URL value copied form step six (ii) of the prerequisites.
     • In the Issuer URL field, paste the Issuer URL value copied from step six (ii) of the prerequisites.
     • In the Token signing certificate field, upload the Signing Certificate value downloaded from step six (ii) of the prerequisites.
5. Click OK.

Identity360 (identity provider) configuration steps

1. Switch to Identity360's application configuration page.
2. In the Instance URL field, enter your Prophix account Login URL value. For example, https://bennetrox.prophix.cloud.
3. Enter the Relay State parameter, if necessary.
   Note: Relay State is an optional parameter used with a SAML message to remember where you were or to direct you to a specific page after logging in.
4. Click Save.
   Integration Settings of SSO configuration for Prophix.

To learn how to assign users or groups to one or more applications, refer to this page.

Your users will now be able to sign in to Prophix through the Identity360 portal.