SAML or OIDC or any AAA authentication for cnMaestro Cloud

[Simon_King]

Just to close this thread, it is no longer necessary to create a support ticket to set up SAML integration with cnMaestro Cloud. See the instructions for SAML configuration at:

Single Sign-On for cnMaestro Cloud using SAML 2.0

Cambium uses a Single Sign-On system to allow you to use a single user account across all of our applications, including cnMaestro, LINKPlanner, cnHeat, Cambium Learning, the Help Desk and the Community. If your company uses a SAML 2.0-compliant Identity Provider (such as Google Workspace, Microsoft Azure / Entra ID, Okta among others), we can configure our SSO system to delegate to your Identity Provider for anyone with an email address matching your company domain. [External Authentication …

Also:

@Simon_King

Note that SAML is currently used for authentication only, not authorization. You would still manage user permissions from within your cnMaestro account. We may enhance this in the future so that roles/groups in the SAML information can be used for access control within cnMaestro

This enhancement is now available for cnMaestro X. You would configure your identity provider to send the list of groups or roles that a user has, and in your cnMaestro X account you can create a “role mapping” to map those groups or roles to cnMaestro roles.