In FlexDeploy 7.0, the SSO Realm concept was added. In previous versions, external realms always referred to LDAP realms.

If an SSO Realm is enabled, no LDAP realms are allowed and users are directed to login with SSO instead of through the normal FlexDeploy login page.

If there is an issue logging in with SSO, or you want to login as an internal user such as fdadmin, go to the page flexdeploy/next/#/login.

Configuring an SSO Realm

If you had an fdsso.config file setup in a pre 7.0 version of Flexdeploy, it will automatically be upgraded to an SSO Realm. In 7.0, SSO Realms are seen in the UI. The file is no longer needed after the first startup of 7.0+.

Only FlexDeploy Administrators can update Realm settings.

A new SSO realm will be populated with a sample configuration, but it might not be close to the one you want. If it doesn’t seem right, delete it out, and press CTRL+Space to choose another sample.

It’s ok if the provider isn’t the same as yours, but choose either SAML or OIDC correctly.

Other providers are fine to use!

You can make credentials for any sensitive values and include them in the script.

Here are some pages of information about some IDPs that we have tested more thoroughly and documented.