Login Authentication Configuration Guide

LAST UPDATED: SEPTEMBER 09, 2025

Users can set up various login methods, including general authentication (username and password on the D3 vSOC login page), and identity provider (IdP) methods like Active Directory (AD) and SAML.

For managed security service providers (MSSPs), each site represents a customer. To maintain data isolation and meet distinct security requirements, different Single Sign-On (SSO) login methods can be configured per site.

In enterprises, each site usually represents a business department or service line. Login methods are typically configured by user rather than by site.

How Login Method is Determined

When a user attempts to login, the D3 system follows a particular sequence to determine the appropriate login method. The below diagram illustrates this sequence.

Login Authentication - Certificate Tab

Navigating to the Login Authentication UI

1. Navigate to the Configuration page.

2. Click on the Application Settings menu item, then click on Login Authentication.

   

Adding a New Login Method

1. Click on the + New Certificate button to to render the New Auth form popup.

   

2. Enter a unique name for the login method in the Auth Name input field.

READER NOTE*

D3 recommends recommends the following naming convention:
<Authentication protocol>-<Identity provider>-<D3 Subdomain>

3. Select an login method in the Auth Type dropdown field.

   

4. Configure the necessary parameters.

5. Ensure the following information is available for the setup: /info

   1. Target URL: This is an embedded link obtained from an IdP like Microsoft Entra ID, Okta, or Google. It is used by the Assertion Consumer Service URL to redirect users to the IdP's login page for authenticating into D3 vSOC.
      Different IdPs have different names for this URL. For example, Microsoft Entra ID calls it "User access URL", whereas Okta calls it "Single Sign-On URL".

   2. Assert Consumer Service URL: This is the D3 vSOC login page link. It is generated by D3 and sent to D3 customers. It uses the Target URL to redirect users to the IdP's login page for authenticating into D3 vSOC. It conforms to the following format:

      CODE

      https://<subdomain>.<domain/server IP>/<application path>/VSOC/D3SOC/D3SAML
      
      eg. https://demo.d3securityonline.net/MainAppV2/VSOC/D3SOC/D3SAML
      
      eg. https://10.0.0.2/demopath/VSOC/D3SOC/D3SAML

   3. Certificate: The base64-encoded certificate provided by the selected SSO platform, enabling the D3 vSOC application to communicate with the SSO IdP.

READER NOTE*

Different IdPs have different names for the certificate. For example, Microsoft Entra ID calls it "Certificate (Base64)", whereas Okta calls it "X.509 Certificate".

6. Ensure that an IdP user is created and assigned the IdP's SSO application.

READER NOTE*

Different IdPs have different names for their SSO application. For example, Microsoft Entra ID calls it an "Enterprise application", whereas Okta calls it "SAML Integration".

7. Click on the Save button at the bottom of the form.

   

8. Click on the Save button on the right hand side of the Login Authentication banner.

   

Managing Existing Login Methods

The table within the Certificate tab displays all of your configured login methods, with columns for Auth Name, Usage, and Auth Parameters.

Default Login Method

Use the dropdown menu to select the default login method, which will be automatically applied upon meeting certain criteria (refer to the How Login Method is Determined section). The Default Login Method is initially set to General Authentication, which does not involve any IdPs and requires the user to enter their D3 vSOC username and password on the D3 vSOC login page.

Login Authentication - Site Tab

Assigning Login Methods to Sites

Individual Assignment

1. Select your desired login method in the dropdown menu underneath the Login Method column.

2. Click on the Save button.

   

Bulk Assignment

You have the option to select multiple sites individually, or to select them all at once. If no Login Method is selected, the default login method will be applied to all sites.

Individual Site Selection

1. Use the checkboxes to select your desired sites.

2. Click on the X Selected button to render the list of login methods.

   

3. Choose the login method for all the selected sites.

4. Click on the Save button.

   

Universal Site Selection

1. Click on the Select All button.

2. Click on the X Selected button to render the list of login methods.

3. Choose the login method for all the selected sites.

4. Click on the Save button.

Login Authentication - User Tab

Assigning Login Methods to Users

Individual Assignment

1. Select the desired login method from the dropdown menu under the Login Method column.

   

READER NOTE*

Upon selecting the login method of a user, login using the redirect link provided by your identity provider (ie. "App Embed Link" for Okta, or "User access URL" for Entra ID) will automatically redirect you to your logged in vSOC.

After selecting the user's login method, use the redirect link provided by the identity provider (for example, "App Embed Link" for Okta or "User Access URL" for Entra ID). The link automatically redirects to the logged-in vSOC.

2. Click on the Save button.

   

Bulk Assignment

You have the option to select multiple users individually, or to select them all at once. If no Login Method is selected, the default login method will be applied to all users.

Individual User Selection

1. Use the checkboxes to select your desired sites.

2. Click on the X Selected button to render the list of login methods.

   

3. Choose the login method for all the selected sites.

4. Click on the Save button.

   

Universal User Selection

1. Click on the Select All button.

2. Click on the X Selected button to render the list of login methods.

3. Choose the login method for all the selected sites.

   

4. Click on the Save button.

   

FAQs