How To: Configure Deep Linking for a Schwab CT SAML Realm

Version Affected: All

 

Overview

This article explains how to configure deep linking for a SecureAuth SAML realm used with Schwab CT. Schwab CT only supports Identity Provider (IdP)-initiated SAML, and IdP-initiated realms only accept a Target parameter to deep link to a specific sub-URL.

Configure the Realm to Accept the Deep Link

1. Ask Schwab CT to format their deep link request in the following style: https://<IdP-FQDN>/<Schwab-realm-alias>/?Target=<encoded-sub-URL>, where <IdP-FQDN> is the fully qualified domain name of the SecureAuth appliance and <Schwab-realm-alias> is the IdP-initiated realm configured for Schwab CT. Schwab CT encodes the value after Target= themselves — it only needs to be the target sub-URL. For example, to reach https://stage.schwabct.com/example/record, Schwab CT only needs to encode the /example/record portion of that URL.
2. In the SecureAuth Web Admin, open the Post Authentication tab for the Schwab CT realm.
3. Locate the Append HTTPS to SAML Target URL setting.

4. Set Append HTTPS to SAML Target URL to False.
5. Click Save.

SecureAuth Knowledge Base Articles provide information based on specific use cases and may not apply to all appliances or configurations. Be advised that these instructions could cause harm to the environment if not followed correctly or if they do not apply to the current use case.

Customers are responsible for their own due diligence prior to utilizing this information and agree that SecureAuth is not liable for any issues caused by misconfiguration directly or indirectly related to SecureAuth products.