Introduction
This article outlines the information and steps you need to take in order to configure Lynda to use the LogonBox SAML Identity Provider. Once configured your users will be redirected to your LogonBox Server to authenticate.
Step 1 - Create the Resource from the Template
Log into your server as admin and navigate to Identity Services->SAML. Select Search Templates and select the Lynda SAML template and click Next.
You will be asked for your Lynda entity ID, this is a unique URL that represents yourconnection with Lynda, you can use the URL of your server for example,
https://lynda.logonbox.com/logonbox/api/sso
This will be incorporated in the final LaunchURL and the IssuerId.
Click Next. At this point click close the templates window so that you can return to the list of SAML resources where your Lynda SAML resource should now be present.
Edit the resource and in the Assignment tab, add users, groups or roles who will have permission to use this resource.
You can add the Everyone role to add all users and click Update.
Step 2 - Download SAML metadata
You will need a couple of things from your server in order to configure Lynda. First you will need to download the SAML metadata.
In the table of SAML resources locate the Lynda SAML resource, and click the options icon to activate the dropdown. Select Download Metadata; this is an XML file that contains information about the Identity Provider and its access points.
Next, navigate to Certificates and locate the SAML RSA certificate. Again using the options icon to activate the dropdown, select Download Certificate.
Step 3 - Establishing Federation with Lynda
Once you have setup the SAML resource on your server you will now need to contact Lynda support and provide them the metadata and certificate. They will then enable SSO on your account and provide you with a number of links and guidance to test and establish SAML responses.
The service generated links will direct you to your LogonBox server to authenticate. Once successful you will then be asked to navigate to a results page in the same browser which shows the success of the test phase. The results need to be sent back to your Lynda support engineer.
If the session was sucessful your Lynda account is ready for SSO authentication.
Step 4 - Final Checks
Each user's email address must match their SAML logon email as this is the primary link between accounts.
Once access is assigned log out of Lynda and then access LogonBox as a user with the rights to use the new resource. In My Resources->Browser Resources click the launch icon to access Lynda.
