Login Authentication Configuration Guide

Last Updated: October 23, 2026

Users can set up various login methods, including general authentication (username and password on the D3 vSOC login page), and identity provider (IdP) methods like Active Directory (AD) and SAML.

For managed security service providers (MSSPs), each site represents a customer. To maintain data isolation and meet distinct security requirements, different Single Sign-On (SSO) login methods can be configured per site.

In enterprises, each site usually represents a business department or service line. Login methods are typically configured by user rather than by site.

How Login Method is Determined

When a user attempts to login, the D3 system follows a particular sequence to determine the appropriate login method. The below diagram illustrates this sequence.

Login Authentication - Certificate Tab

Navigating to the Login Authentication UI

1. Select Global Settings, then Application Settings.

2. Under Security & Authentication, select Login Authentication. It opens on the Certificate tab.

   

Adding a New Login Method

1. Select + New Certificate. The New Auth dialog opens.

   

2. Enter a unique name for the login method in Auth Name.

3. Choose the login method type in Auth Type: General, Active Directory, SAML20 or Entra ID (Azure AD).

   

4. Configure the parameters of that type. For SAML20 these are Target URL, Assertion Consumer Service URL, Certificate, Issuer, Compress Mod, SAML Exchange Base URL, SAML Exchange Target URL, SAML Login Page and SAML Logout URL. For Entra ID (Azure AD) they are User Access URL, Reply URL, Certificate, Claim Name and Role Attribute Mapping.

5. Ensure the following information is available for the setup:

   1. Target URL: This is an embedded link obtained from an IdP like Microsoft Entra ID, Okta, or Google. It is used by the Assertion Consumer Service URL to redirect users to the IdP's login page for authenticating into D3 vSOC.
      Different IdPs have different names for this URL. For example, Microsoft Entra ID calls it "User access URL", whereas Okta calls it "Single Sign-On URL".

   2. Assertion Consumer Service URL: This is the D3 vSOC login page link. It is generated by D3 and sent to D3 customers. It uses the Target URL to redirect users to the IdP's login page for authenticating into D3 vSOC. It conforms to the following format:

      https://<subdomain>.<domain/server IP>/<application path>/VSOC/D3SOC/D3SAML
      
      eg. https://demo.d3securityonline.net/MainAppV2/VSOC/D3SOC/D3SAML
      
      eg. https://10.0.0.2/demopath/VSOC/D3SOC/D3SAML
      

   3. Certificate: The base64-encoded certificate provided by the selected SSO platform, enabling the D3 vSOC application to communicate with the SSO IdP.

6. Ensure that an IdP user is created and assigned the IdP's SSO application.

7. Select Save at the bottom of the New Auth dialog. This adds the login method to the list but does not store it yet.

   

8. Select Save at the top of the Login Authentication panel to store the change.

   

Managing Existing Login Methods

The table within the Certificate tab displays all of your configured login methods, with columns for Auth Name, Usage, and Auth Parameters.

Default Login Method

Use the Default Login Method list to select the default login method, then select Save at the top of the panel. The default login method will be automatically applied upon meeting certain criteria (refer to the How Login Method is Determined section). The Default Login Method is initially set to General Authentication, which does not involve any IdPs and requires the user to enter their D3 vSOC username and password on the D3 vSOC login page.

Login Authentication - Site Tab

Assigning Login Methods to Sites

Individual Assignment

1. Select the login method in the Login Method list of the site.

   

2. Click on the Save button at the top of the panel.

   

Bulk Assignment

You have the option to select multiple sites individually, or to select them all at once. If no Login Method is selected, the default login method will be applied to all sites.

Individual Site Selection

1. Use the checkboxes to select the sites.

2. Click on the X Selected button (it replaces Select All once a row is ticked) to open the list of login methods.

   

3. Choose the login method for all the selected sites.

4. Click on the Save button at the top of the panel.

   

Universal Site Selection

1. Click on the Select All button.

2. Click on the X Selected button (it replaces Select All once a row is ticked) to open the list of login methods.

3. Choose the login method for all the selected sites.

4. Click on the Save button at the top of the panel.

Login Authentication - User Tab

Assigning Login Methods to Users

Individual Assignment

1. Select the desired login method from the dropdown menu under the Login Method column.

   

2. Click on the Save button at the top of the panel.

   

Bulk Assignment

You have the option to select multiple users individually, or to select them all at once. If no Login Method is selected, the default login method will be applied to all users.

Individual User Selection

1. Use the checkboxes to select the users.

2. Click on the X Selected button (it replaces Select All once a row is ticked) to open the list of login methods.

   

3. Choose the login method for all the selected users.

4. Click on the Save button at the top of the panel.

   

Universal User Selection

1. Click on the Select All button.

2. Click on the X Selected button (it replaces Select All once a row is ticked) to open the list of login methods.

3. Choose the login method for all the selected users.

4. Click on the Save button at the top of the panel.

   

FAQs