Home
Installation and Configuration
Read this guide to learn about the requirements and available installation scenarios to ensure that the deployment of BigFix MCM and BigFix Mobile goes smoothly in your environment.
SAML-authentication configuration
MCM and BigFix Mobile supports Security Assertion Markup Language (SAML) authentication to enroll devices to protect sensitive data and ensure secure access to corporate resources.
Step 1: Add BigFix MCM for SAML authentication
Learn how to add MCM and BigFix Mobile for SAML authentication in Okta.

Installation and Configuration
Read this guide to learn about the requirements and available installation scenarios to ensure that the deployment of BigFix MCM and BigFix Mobile goes smoothly in your environment.
- MCM and BigFix Mobile server and components installation
- Identity service configuration
  Starting from UEM3.0, MCM extends the capability to identify and manage devices based on users. The users can be identified based on their associated attributes including names, roles, group memberships, distribution list memberships, or physical locations. The devices identified based on users can then be targeted and managed through various configurations to provide conditional access and ensure compliance, endpoint security, and App protection.
- Simple Certificate Enrollment Protocol (SCEP) configuration
  BigFix MCM supports certificate management and certificate-based authentication through Simple Certificate Enrollment Protocol (SCEP). SCEP is the fastest and most secure way to provision certificates to all your MCM-managed devices. With SCEP, IT Admins can automate issuing certificates to the endpoints to provide access to corporate Wi-Fi, VPN, and secure e-mail through encryption.
- Domain join installation and configuration
  Read this section to learn the prerequisites and the tasks to install ODJ service to set up your environment to enroll Windows devices and join Active Directory domain or both Active Directory and Azure AD domain.
- SAML-authentication configuration
  MCM and BigFix Mobile supports Security Assertion Markup Language (SAML) authentication to enroll devices to protect sensitive data and ensure secure access to corporate resources.
  - Key terms
    Read this section to get familiarized with the terms used in SAML-authenticated enrollment.
  - Step 1: Add BigFix MCM for SAML authentication
    Learn how to add MCM and BigFix Mobile for SAML authentication in Okta.
  - Step 2: Create SAML credentials file
    Read this topic to learn how to get issuer and sign-on URL information from the Okta server and create a .json file to upload to WebUI while configuring SAML authentication.
  - Step 3: Download SAML Identity Provider certificates from Okta server
    Read this topic to download okta.cert file to authenticate Okta as the SAML Identity Provider.
  - Step 4: Configure authentication method through WebUI
    Read this topic to learn how to configure SAML as the authentication method through WebUI.

Step 1: Add BigFix MCM for SAML authentication

Learn how to add MCM and BigFix Mobile for SAML authentication in Okta.

Before you begin

You need an Okta Development account to perform administrator activities.

About this task

To create a direct access application in your Okta tenant, complete the following steps:

Procedure

Sign in to your Okta tenant as an administrator.
In the Admin Console, navigate to Applications > Applications.
Click Create App Integration.
In the Create a new app integration dialog, choose SAML 2.0 and click Next.
Enter an App name such as Direct access to <my app> and click Next.
In Configure SAML step, in the SAML Settings section, enter values for the following:
- Single sign on URL: The location where the SAML assertion is sent with a HTTP POST. Example: https://<MCM server hostname >:443/enrollment/saml/callback>
- Audience URI: Enter Unique name for MCM and BigFix Mobile application.
Note: Ensure that the MCM server hostname is appended with port number while entering the single sign-on value.
Click Next. In the last page, select "I'm an Okta customer adding an internal app", and click Finish.
For more information on enrolling applications in Okta, refer to OKTA_Documentation_Link.

What to do next

Step 2: Create SAML credentials file