Enable IdP-initiated SSO (optional)

How to enable IdP-initiated SSO.

By default, Black Duck Portal uses SP-initiated authentication, where users access Black Duck Portal to start the authentication process. IdP-initiated authentication reverses this: the login flow begins at your IdP, which sends an unsolicited response to Black Duck Portal. Black Duck Portal does not support IdP-initiated authentication for OIDC connections.

CAUTION:

IdP-initiated authentication is less secure and is not recommended. Use SP-initiated SSO whenever possible.

Create a support case in Black Duck Community, including your IdP's callback URL (sometimes called the assertion consumer service (ACS) URL or reply URL) in the request.

Note: The name of this URL varies from IdP to IdP. See Get help with Black Duck Portal for more information.
After a support representative enables IdP-initiated SSO, use Black Duck Portal's callback URL to finalize the setup in your IdP:
```
https://id.blackduck.com/login/callback?connection={TenantID}&organization={TenantID}
```
Replace {TenantID} with your tenant ID.

Tip: After you create a service account, you can find your tenant ID on the Service Accounts page. Select the options icon next to any service account, and then select Manage Secret. Your tenant ID appears in the Tenant ID field.