Alibaba Mail SSO

Overview

This article describes the SSO configuration process between Alibaba Mail and BambooCloud IDaaS.

Preparation

1. Contact Alibaba Mail customer service in advance to purchase or activate the SSO and data synchronization API interfaces.

2. Send the following application email to alimailservice@alibaba-inc.com.

   Company email domain: http://xxx.xxx.xxxx/
   Company name: xxxxxx
   Application environment domain: http://xxx.xxx.xxxx/ 
   Egress IP: 47.92.171.137 (This IP is the IDaaS service egress IP and is required.)
   Interfaces to access: Account and organization structure synchronization
   Single sign-on: requires appCode, appSecret
   Synchronization interface: requires accessCode, accessTarget, accessPassword

3. Obtain the API key and SSO key.

Authentication Configuration

WARNING

For parameter issues during configuration, which mailbox attributes to synchronize to Alibaba Mail, and the mapping between BambooCloud IDaaS user attributes and Alibaba Mail user attributes, please consult BambooCloud IDaaS delivery personnel.

1. The administrator logs in to the BambooCloud IDaaS Enterprise Center, goes to Resources > Applications, adds a new pre-integrated application, and adds the Alibaba Mail pre-integrated application.

   

2. Configure authentication parameters.

   

   Parameter	Description
   appCode	Alibaba Mail SSO appCode
   appSecret	Alibaba Mail SSO appSecret
   Alibaba Mail Redirect Address	The address entered after logging in to Alibaba Mail, generally the enterprise mailbox address.

Login Verification

• Method 1: In the BambooCloud IDaaS User Center, click the Alibaba Mail logo to enter the mailbox.

• Method 2: On the Alibaba Mail login page, enter the BambooCloud IDaaS user's email and password to log in to the mailbox.