Configuring SAML SSO for Dropbox

These steps will guide you through setting up the single sign-on functionality between ADSelfService Plus and Dropbox.

Prerequisites

1. Log in to ADSelfService Plus as an administrator.
2. Navigate to  Configuration > Self-Service > Password Sync/Single Sign On > Add Application, and select Dropbox from the applications displayed.
   Note: You can also find the application that you need from the search bar located in the left pane or the alphabet-wise navigation option in the right pane.
3. Click IdP details at the top-right corner of the screen.
4. In the pop-up that appears, copy the Login URL and download the SSO certificate by clicking on the Download X.509 Certificate link.

Dropbox (Service Provider) configuration steps

1. Login to Dropbox with an administrator credentials.
2. Click on Admin Console in the left-pane.



3. In the tab that opens, click on Settings in the left-pane and select Single Sign on.

4. Click the drop-down box against the Single sign-on sign and select either Optional/Required based on your need.
5. Selecting Optional will allow users to log on to Dropbox with Single sign-on or their Dropbox password. Selecting Required will only allow users to login through Single sign-on.



6. Click the Add sign-in URL button in the Identity provider sign-in URL field and provide the Login URL copied in step 4 of the prerequisites.
7. Optionally, click the Add sign-out URL button in the Identity provider sign-out URL field and provide the Logout URL copied in step 4 of the prerequisites.
8. Click on the X.509 certificate field and upload the X.509 certificate downloaded in step 4 of the prerequisites.



9. Click Save.
10. Copy the SSO sign-in URL. We will need it later.

ADSelfService Plus (Identity Provider) configuration steps

1. Now, switch to ADSelfService Plus’ Dropbox configuration page.



2. Enter the Application Name and Description.
3. In the Assign Policies field, select the policies for which SSO need to be enabled.
   Note:ADSelfService Plus allows you to create OU and group-based policies for your AD domains. To create a policy, go to Configuration > Self-Service > Policy Configuration > Add New Policy.
4. Select Enable Single Sign-On.
5. Enter the Domain Name of your Dropbox account. For example, if you use johndoe@thinktodaytech.com to log in to Dropbox, then thinktodaytech.com is the domain name.
6. Enter the SSO sign-in URL copied in step 10 of the SP configuration in the SP Login Initiate URL field.
7. Enter the Assertion Consumer Service URL as https://www.dropbox.com/saml_login.
8. In the Name ID Format field, choose the format for the user login attribute value specific to the application.

Note: Use Unspecified as the default option if you are unsure about the format of the login attribute value used by the application

9. Click Add Application.
Your users should now be able to sign in to Dropbox through ADSelfService Plus.

Note: For Dropbox, both SP and IDP initiated flows are supported.