Federated authentication

Federated authentication allows you to use your preferred OpenID Connect (OIDC) identity provider (IdP), such as Okta or Azure, to authenticate with any Arctic Wolf® web portal. This provides a single sign-on (SSO) experience for your users with your existing IdP, eliminating the need for another set of login credentials for Arctic Wolf services.

Using your own IdP, you can:

• Manage passwords
• Manage multi-factor authentication
• Audit logins

Set up federated authentication

1. Configure your IdP.
2. Register your IdP with Arctic Wolf.

Step 1: Configure your IdP

• Configure your IdP to use OpenID Connect as the sign-in method.

  The redirect or reply URI for Arctic Wolf is https://auth.arcticwolf.com/login/callback.

  For detailed instructions, see the guide for your IdP:

  • Azure Setup Guide
  • Okta Setup Guide
  • OneLogin Setup Guide
  • Duo Setup Guide

  Note: If your IdP is not listed, see the official documentation for your IdP to configure federated authentication.

Step 2: Register your IdP with Arctic Wolf

1. Sign in to the Arctic Wolf Unified Portal.

2. In the menu bar, click Telemetry Management > Connected Accounts.

3. Click Add Account +.

4. On the Add Account page, from the Account Type list, select Federated Authentication.

5. Click OpenID Connect.

6. On the Add Account page, complete these steps:

   1. Account Name — Enter a unique and descriptive name for the account.

      For example, enter Okta SSO or OneLogin ODIC Connector.

   2. In the Issuer URL field, enter the IdP Issuer URL.

   3. In the Client ID field, enter the IdP-issued client ID.

   4. In the Client Secret field, enter the IdP-issued client secret.

   5. In the Domain Name field, enter your company email domain name.

   6. Credential Expiry — (Optional) Enter the expiration date if the credentials have an expiry date.

7. Click Test and Submit Credentials.

Arctic Wolf automatically receives a ticket to complete the federated authentication setup. You receive a confirmation Zendesk email when the account setup is complete.