SAML Apps
What your IT department needs:
Red Marker is designed to use the Service Provider (SP) Initiated flow. The details below will used to configure your IdP depending on your desired region of operation and authentication mechanism. Should you require a signing certificate this can be provided on request.
Attribute Mapping
Red Marker expects a mapping of a User's primary email address to the email attribute in the SAML assertion.
This is a critial step in setting up your SAML app.
Service Provider (SP) Details
| Environment | Entity ID | ACS URL |
|---|---|---|
| Primary | urn:amazon:cognito:sp:ap-southeast-2_MBNCgB1ya | https://auth.redmarker.ai/saml2/idpresponse |
| Backup | urn:amazon:cognito:sp:ap-northeast-1_jomZoDj8U | https://auth.tokyo.redmarker.ai/saml2/idpresponse |
Logout URL
https://auth.redmarker.ai/logout?client_id=3t937brenut3nutm62pc4n3p8u&redirect_uri=https://api.redmarker.ai/authorised&response_type=code
| Environment | Entity ID | ACS URL |
|---|---|---|
| Primary | urn:amazon:cognito:sp:us-east-1_vyBHYP4ki | https://redmarker-sso-us.auth-fips.us-east-1.amazoncognito.com/saml2/idpresponse |
| Backup | urn:amazon:cognito:sp:us-west-2_3CQRAmKSg | https://redmarker-sso-uswest.auth-fips.us-west-2.amazoncognito.com/saml2/idpresponse |
Logout URL
https://redmarker-sso-us.auth-fips.us-east-1.amazoncognito.com/logout?client_id=2fdcrn8as3j1vavmjerjnokb5c&redirect_uri=https://api.us.redmarker.ai/authorised&response_type=code
| Environment | Entity ID | ACS URL |
|---|---|---|
| Primary | urn:amazon:cognito:sp:eu-west-2_2RPe0Biwn | https://auth.emea.redmarker.ai/saml2/idpresponse |
| Backup | urn:amazon:cognito:sp:eu-west-1_BjqNcpdXj | https://auth.ireland.redmarker.ai/saml2/idpresponse |
Logout URL
https://auth.emea.redmarker.ai/logout?client_id=469iqki7h9m836ff5a6s4a190i&redirect_uri=https://api.emea.redmarker.ai/authorised&response_type=code
User Acceptance Testing (UAT)
| Environment | Entity ID | ACS URL |
|---|---|---|
| Primary | urn:amazon:cognito:sp:ap-southeast-2_8eEGmFH46 | https://auth.uat.redmarker.ai/saml2/idpresponse |
UAT Availability
The UAT Environment is refreshed from the production environment regularly as such should be considered ephemeral. Also note the UAT environment is decommissioned between 7pm - 7am AEST and on weekends.
If an extended UAT window is required, please contact support@redmarker.ai with details and three business days notice for these operating hours to be adjusted.
What you need to provide Red Marker:
After you have successfully configured your IdP, you will need to provide a Metadata.xml file back to Red Marker. More details on this can be found here.
Also, you will need to provide a list of the email domain's being used by your IdP.