Rublon

Secure Remote Access

By

Last updated on October 16, 2024

Overview

The purpose of this document is to enable Rublon Two-Factor Authentication (2FA) for users logging in to Confluent. In order to achieve that, you have to use Rublon Access Gateway. All required steps will be described in this document.

Supported Authentication Methods

Authentication Method Supported Comments
Mobile Push ✔ N/A
WebAuthn/U2F Security Key ✔ N/A
Passcode ✔ N/A
SMS Passcode ✔ N/A
SMS Link ✔ N/A
Phone Call ✔ N/A
QR Code ✔ N/A
Email Link ✔ N/A
YubiKey OTP Security Key ✔ N/A

Before you start

You need to install and configure Rublon Access Gateway itself before configuring Confluent to work with it. Please read the Rublon Access Gateway documentation and follow the steps in Installation and Configuration sections. Afterwards, follow the Configuration section in this document.

Configuration

Follow these steps to enable Rublon 2FA in Confluent.

Confluent

1. Log in to Confluent as admin.

2. Click the menu icon in the upper-right corner and then click Single sign-on.

3. Enter an SSO Identifier and click Continue. This unique identifier will be used to identify your organization after enabling SSO.

4.  Copy the values of Assertion consumer service URL, Entity ID and Single logout URL. Do not close the browser tab with Confluent. Open Rublon Access Gateway in a separate tab.

Rublon Access Gateway

1. In Rublon Access Gateway, go to Applications → Add application.

2. Fill in the form and click SAVE to add a new application. Refer to the following image and table.

Application nameEnter a name for the application, e.g. Confluent. The name will be displayed during Rublon 2FA.
Entity IDEnter the value of Entity ID from Confluent. 
Assertion Consumer ServiceEnter the value of Assertion consumer service URL from Confluent. 
Single Logout ServiceEnter the value of Single logout URL from Confluent. 
NameID formaturn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
NameID attributemail
Send AttributesNameID
Signature algorithmsha-256
Validate Authn RequestUncheck.
Sign responseCheck.
Certificate for signingSelect the certificate you have downloaded from Applications → Information for configuring applications with Rublon Access Gateway → DOWNLOAD CERTIFICATE.

3. While still in Rublon Access Gateway, navigate to Applications → Information for configuring applications with Rublon Access Gateway and then:

  • Download the certificate by clicking the DOWNLOAD CERTIFICATE button.
  • Write down the value of SSO URL.

Back to Confluent

1. In Confluent, click Continue if you are still on the Configure your Identity Provider page.

2. Upload the certificate you just downloaded from Rublon Access Gateway.

3. Enter the value of SSO URL from Applications → Information for configuring applications with Rublon Access Gateway you have written down before.

4. Click Save. Your configuration is now complete. You can log in to Confluent with Rublon 2FA.

Log in to Confluent with Rublon 2FA

Note

Logging in with traditional login and password is not possible for users with enabled SSO (except for the administrator).

1. Go to https://confluent.cloud/login/sso/exampleaccount. Replace exampleaccount with the SSO Identifier of your organization.

2. You will be redirected to the Rublon Access Gateway login page.

3. Provide your username and password. Click SIGN IN. A window will appear with a selection of various 2FA options from Rublon. Let’s choose Mobile Push.

4. You will be sent a push notification. Tap APPROVE.

5. You will be successfully logged in to Confluent.

Troubleshooting

If you encounter any issues with your Rublon integration, please contact Rublon Support.

Related Posts

Rublon Access Gateway

Rublon Access Gateway – Integrations