Hubble Web users can leverage SAML2.0 Single Sign On Integration. To make use of this functionality the customer must have an Identity provider configured which supports the SAML2.0 protocol such as Active Directory Federated Services, OneLogin, PingIdentity, Okta, and many more
Hubble Desktop users can leverage a Simplified Sign on which verifies against the Windows account linked to the Hubble user.
What will happen if a user wants to access both the Web and the Desktop and leverage the Web SSO?
The recommendation is to enable both the Web SAML2.0 integration and Simplified login to simplify the experience.
Can a user be centrally disabled in the Identity provider?
If a Web user is disabled in the identity provider then they will be unable to login to the Web using SSO. However today this does not disable the account in Hubble automatically. If the account is disabled in Hubble they will be able to log in with SSO but will be disconnected if they try to run any reports. Previous cached reports will show but will disconnect the user when the report attempts to automatically run.
Can users be provisioned from the Identity Provider?
No. Hubble would still require a license key to be assigned and folder permissions granted as we have not yet added this functionality.
Can we have a mix of users using SAML2.0 and Hubble Repository Credentials?
Yes
What happens if the Identity Provider is offline or the network connection goes down to the Identity provider?
The Web SSO will not be able to correctly direct the traffic and the user will be unable to login. We recommend that if this is a concern or regular occurrence that the Hubble Repository credentials are used.
Does Hubble support Active Directory?
Active Directory itself does not support the SAML2.0 protocol, however by adding Microsoft Active Directory Federated Services then SAML2.0 will be supported. Our investigation showed that organizations are moving to Office 365 which includes Azure Active Directory which does support SAML2.0.
What happens if I have an account with the Identity Provider, but there isn't one set up for Hubble yet ?
The login to Hubble will fail with "Unexpected Error"
