The App > Design > Integrations > Other page has additional integrations: SAML single sign-on for player authentication, and Slack for sending brainCloud alerts to your team's channels.
Each integration has its own panel. Click a panel to expand it, turn on Enable, fill in the settings and click Save Changes in that panel. Each panel is saved separately. If you try to leave the page with unsaved changes, you are asked to confirm.
SAML
brainCloud apps can authenticate player accounts with SAML, through External Authentication. This is mostly used to connect an app to a corporate directory or another SAML identity provider (IdP). For a full setup guide, see Configuring SAML SSO.
Required settings:
Identity Provider Issuer: your IdP's issuer (entity ID) URL.
x509 Cert: your IdP's signing certificate, in PEM format (
-----BEGIN CERTIFICATE-----...-----END CERTIFICATE-----). brainCloud uses it to verify SAML responses.UserId Name: the name of the SAML attribute that holds the user's ID. Letters, numbers and underscores only.
Optional settings:
Identity Provider Logout URL: your IdP's single logout URL.
Service Provider Entity ID: the entity ID your IdP uses for your app.
Service Provider Public Key Cert and Service Provider Private key: the certificate and private key used to sign logout requests, in PEM format. For security, the private key is masked once saved. Click the edit icon to replace it.
Security Sig Algorithm: the signature algorithm URI to use for signing.
Redirect URLs: add one entry per page of your app that starts a SAML login. Click +, enter a Page Name, the Login URL to send the player to after a successful login, and optionally a Logout URL, then click Add. Click an existing entry to update or delete it. Redirect URL changes are saved when you click Save Changes.
When a login completes, brainCloud checks the IdP's response, reads the user ID from the UserId Name attribute, and redirects the player to the page's Login URL. Your External Authentication script can then read the response attributes with the SAML service in Cloud Code.
Slack
Send brainCloud alerts about your app to one or more Slack channels, using Slack incoming webhooks.
Default Channel for Alerts: paste a Slack webhook URL. Any alert category without its own channel is sent here. Click Test to send a test message.
Tick the alert categories you want to receive:
Announcements: announcements about overall system status.
Chat: chat messages flagged for profanity.
Deploys: app deployment messages.
Hosting: room and relay server messages.
Integration: integration warnings and configuration errors, such as expiring certificates.
Jobs: messages about long-running jobs such as exports.
Purchases: real-time purchase events.
Scripts: script-related errors.
Usage: a daily summary of app performance.
General: anything that doesn't fit into the other categories.
To send a category to its own channel, tick Post to unique channel under that category and paste a separate webhook URL. Click its Test button to check it. Categories that are unticked are not sent anywhere.
For more details, see Configuring Slack Alerts.
Permissions
Write access to this page is required to change these settings. Users with read-only access can view the page, but all controls are disabled.
