Now that you have completed the required prerequisites in Oracle Cloud, you can add Britive as the Identity Provider in Oracle Cloud.

This involves two steps:

1. Downloading SAML Metadata from Britive

Perform the following steps to download the SAML metadata from Britive:

Note:

You need to have Britive administrator privileges to download SAML metadata.

Login to the Britive application with administrator privileges.
Click Admin > Security.
Select the SAML Configurations tab.
Click DOWNLOAD SAML METADATA.

This downloads the SAML metadata needed to configure the Identity Provider in Oracle, as an XML file, to your computer.

2. Adding Britive Identity Provider in Oracle Cloud

Perform the following steps to add Britive as an Identity Provider in the Oracle cloud:

Login to Oracle Cloud Console with administrator privileges.
Click Identity & Security from the navigation menu.
Click Domains from the Identity section.
Click on the Default domain.
Click on Security from the navigation menu.
Click on Identity providers from the navigation menu.
Click on Add IdP and select Add SAML IdP.
Enter the following in the Add SAML identity provider window:
- Name: Enter a name for the Identity Provider.
- Description: Enter a description for the Identity Provider.
- Click Next.
- Upload the SAML metadata downloaded from Britive in the Upload identity provider metadata section.
Click Next.
Select the default settings in Map user identity and click Next.
Click Create IdP.
Open the newly created IDP and click Configure JIT.
1. Select Enable Just-In-Time (JIT) provisioning.
2. Check Create a new identity domain user.
3. Check Update the existing identity domain user.
4. Enter the following in the Map user attributes section:
  1. Select NameID for userName.
  2. Select Attribute and type familyName for familyName.
  3. Select NameID for primaryEmailAddress.
  4. Click Add row and enter firstName in Idp user attribute and First name in the Identity domain user attribute.
  5. Select Assign group mapping.
  6. Enter groups in the Group membership attribute name.
  7. Select one of the two options as per requirement:
    - Assign implicit group membership mappings
    - Define explicit group membership mappings
  8. Select the following under the Assignment rules section:
    - Merge with existing group memberships
    - Ignore the missing group
Click Save changes.
Click on the Activate IdP button.
Click on IdP Policies from the navigation menu.
Click on Default Identity Provider policy.
Edit the Default IDP Rule.
Add the newly created identity provider in Assign identity providers.
(Optional) Apply conditions and filter IP addresses as required.
Click Save changes.

Possible Error Message

If you add more than three Identity Providers in the Oracle Cloud tenant application, an error is displayed while adding the next Identity Provider.