Checkmarx SAML Integration

This document explains how to implement Monosign with Checkmarx. It covers Single Sign-On. Before you continue, starting with the Checkmarx Single Sign-On implementation page is better.

Creating an Application on Monosign

Create your application on Monosign and configure your access policy. Once you create, click “Keys” and add a new Access Key for SAML Key for access.

You are gonna see your configuration for your Checkmarx app as follows;

Configuration Single Sign-On for Checkmarx

Navigate Access Control of your Checkmarx. To do that, click your account or type your Checkmarx domain to your address bar and add the following to the URL “/CxRestAPI/auth/#/teams”. And click Settings, and click SAML. You are gonna see the following page.

Click “Add Identity Providers”. Type your settings and click “Save”.

Setting	Monosign	Checkmarx
Identity provider display name		Monosign This is your “Button label”. You can type anything you want.
Issuer	Entity Id	Issuer (Identity Provider)
Single Sign-On URL	Sign On Service	Single Sign-On URL
Logout Redirect URL	Logout Service	Logout Redirect URL
IdP Certificate file	Download from the page	IdP Certificate file (Upload)
Request Binding		HTTP-Post
User Authorization Management (Recommended)		Select your default Role

If you have a different domain name or address, you need to update it with the correct one. Click Service Provider and update your domain name. This is important for redirection.

Enable IdP Initiated Login

Go to the Monosign Admin Panel, click “Checkmarx” application, then click “Edit”.

Click “Login” and select Login Method as SAML2.

Click “Source, Provider and Profile” and select “Profile Access Type” as “All”.

Save your settings and go back to your Application page. Click “Keys” and click “Configure” then click the SAML Settings tab.

Update your Assertion Consumer Url like the following;

CODE

https://your-checkmarx-domain-address/CxRestAPI/auth/identity/samlAcs

And scroll to the “Extra Attributes” section and fill the setting as follows;

Attribute	Value
First_Name	{{Profile.FirstName}}
Last_Name	{{Profile.LastName}}
Email	{{Email}}

Save your settings.

You can now type your Checkmarx address and you will see a second option like the following. Click it and you will be logged in.