SentinelOne’s configuration can be achieved after you have a valid account and support login. Afterwards its pretty easy to configure the SSO part.
In the cloud console of SentinelOne go to Settings>>Integrations>>SSO
Configure the following items for SSO usage:
IDP Redirect URL:
https://workspaceoneaccessurl:443/SAAS/API/1.0/GET/apps/launch/app/uniqueapplicationid
IssuerID:
https://workspaceoneaccessurl/SAAS/API/1.0/GET/metadata/idp.xml
Configure the rest of the items at your own requirements but don’t forget to upload the IDP public certificate of Workspace ONE Access.
Make copies of the Assertion Consumer Service URL and SP Entity ID to use in Workspace ONE Access.
For the configuration part of Workspace ONE Access just add a new manual SAML 2.0 application and provide the following information:
Single Sign On URL: This is the Assertion Consumer Service URL of SentinelOne
Recipient URL: This is the Assertion Consumer Service URL of SentinelOne
Application ID: this is the SP Entity ID URL of SentinelOne
Username Format: Unspecified
Username Value: ${user.email}
Don’t forget you only get an application id in Workspace ONE Access if you’ve created an application. So first up create the application with bogus input to get your id and update it accordingly.