Bonusly is an employee recognition and rewards program. See https://www.bonusly.com.
Note: This guide was tested using Identity as a Service 5.37 and Bonusly. Other versions of Bonusly may require integration and configuration steps that differ from those documented in this procedure. For newer versions of Bonusly, this integration guide can be used as an initial approach for integrating Bonusly. In the event of other issues, contact support@entrust.com for assistance.
Before you begin, open two browser windows: one for Bonusly and one for IDaaS.
Log into your Bonusly administrator account. The Bonusly Home page appears.
Click Manage plan. The Plans & Billing page appears.
In the left-pane, click Integrations. The Integrations page appears.
Scroll to Single sign-on and click SAML. The SAML Integration page appears.
Open a text editor, such as Notepad, and copy and paste the following:
Consumer URL
App ID
Leave this window open to return to later in this procedure.
Add Box application to Identity as a Service
Log into your Identity as a Service administrator account.
Click
> Security > Applications. The Applications Lists page appears.
Click Add. The Select an Application Template page appears.
Do one of the following:
Select SAML Cloud Integrations from the search drop-down list and scroll to find the application you want to add to IDaaS.
- or -
In the Search bar, enter a search option to filter for the application you want to add to IDaaS.
Click Bonusly. The Add Bonusly page appears.
Enter an Application Name.
Enter an Application Description.
Optional. Add a custom application logo.
Click
next to Application Logo. The Upload Logo dialog box appears.
Click
to select an image file to upload.
Browse to select your file and click Open. The Upload Logo dialog box reappears showing your selected image.
If required, resize your image.
Click OK.
Select the Authentication Flow that appears to users during login.
Click Next. The General page appears.
In the Default Consumer Service URL field, enter the Consumer URL you copied in Step 1: Copy the Consumer Service URL and App ID from Bonusly.
In the Service Provider Entity ID (Issuer) field, enter the Consumer URL you copied in Step 1: Copy the Consumer Service URL and App ID from Bonusly.
From the SAML NameID Attribute drop-down list,select Email.
Select the SAML Signing Certificate from the drop-down list.
Leave the remaining settings at the default values.
Click Submit.
Step 3: Add a resource ruleStep 3: Add a resource rule
Download the Metadata file from Identity as a Service
In Identity as a Service, click
> Security > Applications. The Applications List page appears.
Do one of the following:
Click
next to the application you are integrating with Identity as a Service.
–or–
Click
next to the application you are integrating with Identity as a Service and select SAML IDP Metadata.
The SAML Application Metadata dialog box appears.
Select the certificate to include in the SAML IDP Metadata file from the drop-down list.
If applicable, Select the domain to include in the SAML IDP Metadata file from the drop-down list.
Enter the Lifetime, in days, for the SAML IDP Metadata file. The value must be between 2 and 730.
Do one of the following, as required:
Copy the Public Endpoint to paste into your SAML application being used Identity Provider authentication.
Click Download.
Note: If you are using multiple domains, you must download each domain's metadata file separately because the values in the metadata file vary for each domain.
Copy the SAML Configuration from Identity as a Service
Log into your Identity as a Service administrator account.
Click
> Security > Applications. The Applications Lists page appears.
Under SAML Cloud Integrations, click SAML Configuration. The SAML Configuration dialog box appears.
This dialog box contains information you need to configure your SAML application for Identity as a Service authentication.
Do one of the following:
Leave this dialog box open to reference later in this procedure.
Copy the Entity ID, Single Sign-on URL, and Single Logout URL to a text file and save it to reference later in this procedure.
Note: Depending on the integration you are performing, you may not need all three of these SAML configuration values.
Return to the SAML Integration browser window you left open in Step 1: Copy the Consumer URL and App ID from Bonusly.
In the IdP Metadata URL, paste the Entity ID you copied in Step 4: Copy the Public Endpoint from Identity as a Service.
In the Idp Issuer (Entity ID) field, paste the Entity ID you copied in Step 5: Copy the Entity ID from Identity as a Service.
Click Save. The SAML Integration information page appears.
Open a test editor, such as Notepad and copy and paste SP Issuer ID.
Leave this window open to return to later in this procedure.
Click
> Security > Applications.
The Applications List page appears.
In the Application List under SAML Cloud Integrations, click Bonusly (or the name you assigned to the application is you used something different). The Edit Application page appears.
Click Next.
In the Service Provider Entity ID (Issuer) field, replace current value with the SP Issuer ID you copied in Step 6: Configure Bonusly for IDaaS authentication.
Click Submit.
Return to the window you left open in Step 6: Configure Bonusly for IDaaS authentication.
In the left pane, click Go to Home. The Home page appears.
Click Invite at the top of the page. The Invite to Bonusly dialog box appears.
In the Who would you like to invite? field, enter your IDaaS admin email address.
Under Account permissions, select Admin access.
Click Send Invite.
Go to your email application and click Accept Invite.
Create and confirm a password.
Click Next.
Step 9: Test the integrationStep 9: Test the integration
Testing Service Provider Login
Go to https://bonus.ly/saml/ADP_ID/index (where App ID is the App ID you copied in Step 1: Copy the Consumer URL and the App ID from Bonusly.
Enter your Identity as a Service User ID and click Next.
Respond to the second-factor authentication challenge. If you respond successfully, you are logged in to the Bonusly.
Testing Identity as a Service redirect log in
Log in to your Identity as a Service account.
Go to your My Profile page if you are not already there.
Under Applications, click Bonusly.
Respond to the second-factor authentication challenge. If you respond successfully, you are logged in to Bonusly.