ON THIS PAGE

What it's about

How to set up

To activate the login with SAML on XCALLY, you need to:

A.

B. Enable SAML connection in XCALLY

C. Enable SAML login for Administrator, Users and Agents

Join XCALLY server to the xdomain

As requirement of the integration, the XCALLY server must be added in the Active Directory domain.

Follow these steps to configure the XCALLY server:

Use SSH to connect to your XCALLY server
Login with root user

Install required packages for joining to Active Directory (AD) domain

apt -y install realmd libnss-sss libpam-sss sssd sssd-tools adcli samba-common-bin oddjob oddjob-mkhomedir packagekit

After a successful installation can you proceed to discover Active Directory: the realm discover command returns complete domain configuration and a list of packages that must be installed for the system to be enrolled in the domain
```
realm discover <domain name>
```
An Active Directory administrative user account is required for integrating your XCALLY machine with Windows Active Directory domain. Check and confirm Active Directory admin account and the password
```
realm join -U <user> domain.name
```

Enable Active Directory connection in XCALLY

To use Active Directory login, you need to add Active Directory settings on XCALLY.

Retrieve Active Directory configuration

Ask to Active Directory Administrator the following properties:

Property	Description
url	Active Directory server to connect to, e.g. ldap://ad.example.com
baseDN	The root DN from which all searches will be performed, e.g. dc=example,dc=com.
domain	Domain of email address, e.g. example.com

Configure Active Directory in XCALLY

Follow these steps to configure the Active Directory:

Use SSH to connect to your XCALLY server
Login with motion user
```
su - motion
```

Open /var/opt/motion2/.env and edit the following properties (add it if not existing)

XC_ACTIVEDIRECTORY_BASE_DN='<baseDN>'
XC_ACTIVEDIRECTORY_URL='<url>'
XC_ACTIVEDIRECTORY_DOMAIN='<domain>'

Stop motion application (with root privileges)
```
service motion stop
```
Initialize environment variables
```
cd /var/opt/motion2
npm run initialize
```

Enable SAML login for Administrator, Users and Agents

Enable login in General Settings

The Login with SAML must be enabled under Settings → General:

Users and Agents will be able to connect to XCALLY using SAML provider credentials.

Staff emails on XCALLY must be equal to the Staff emails registered on SAML provider.

Login for XCALLY users

On the Login page, the button Login with SAML is available:

Clicking on Login with SAML, XCALLY Users will be redirected on the provider portal.

After entering the provider credentials on the provider portal, XCALLY Interface will be opened as usual.

If configured, from the second login on, each time Users click on Login with SAML, they will directly access to XCALLY, without entering credentials again.

SAML SSO