Introduction
This article outlines the information and steps you need to take in order to configure GoToMeeting to use the LogonBox SAML Identity Provider. Once configured your users will be redirected to your LogonBox Server to authenticate.
Note: Currently only service-initiated login is supported
Step 1 - Create the Resource from the Template
Log into your server as admin and navigate to Identity Services->SAML in the left hand menu. Click Search Templates and select the GoToMeeting SAML template and click Next.
You will be asked for the Entity Id.
The entity Id uniquely identifies your connection with GoToMeeting e.g. gotomeeting.logonbox.com.
Click Next to continue.
At this point you may click on the Go to Article link to open this article in a separate browser window, or click the X to return to the SAML list of resources where your GoToMeeting SAML resource should now be present.
Step 2 - Download SAML metadata
You will need a couple of things from your server in order to configure GoToMeeting.
First you will need to download the SAML metadata.
In the table of SAML resources locate the GoToMeeting SAML resource, and click the gears icon to activate the dropdown. Select Download Metadata; this is an XML file that contains information about the Identity Provider and its access points.
Open the XML file containing the metadata and locate the logon service URL and redirect URL. These are located towards the end of the document and will look like
https://demo.logonbox.com/app/api/sso/logon/123456
https://demo.logonbox.com/app/api/sso/logout/123456
Copy the entire URL as we will need these in the next step.
Next, navigate to Certificates in the left menu and locate the SAML RSA certificate. Again using the options icon to activate the dropdown, select Download Certificate.
Step 3 - Configuring GoToMeeting
Log into GoToMeeting SAML settings page and select Identity Provider Settings.
Make sure Configure Manually is selected and then configure the following:
- Sign-in page url - this is the login URL identified in previous step, 'https://demo.logonbox.com/app/api/sso/logon/123456'
- Sign-in binding - select Redirect
- Sign-out page url - this is the logout URL identified in the previous step,https://demo.logonbox.com/app/api/sso/logout/123456
- Sign-out binding - select Post
- Identity Provider Entity ID - this is the Entity Id you defined in step 1
- Verification certificate - you will need to paste the certificate file downloaded in the previous step including the BEGIN and END CERTIFICATE lines
Hit Save.
Step 4 - Final Checks
One final step before you start using your GoToMeeting resource, ensure that you have assigned some Roles to it so that its available for users to use. This can be done by editing the resource and going to the Assignment tab.
Once access is assigned you can login to GoToMeeting by navigating to the GoToMeeting login page and selecting, Use My Company ID, you will be asked for your company email address, this is your LogonBox login email.
The email address on the user account in LogonBox must match that of a user within GoToMeeting.
Alternatively, a user can launch the resource from their LogonBox account, in the Browser Resources section of My Resources.
Click the rocket icon to launch the resource.
