Carbon Black AuthHub for Cisco Duo Single Sign-On IDP

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Audit and Remediation (formerly Cb Live Ops)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
• Carbon Black Cloud Prevention
• Carbon Black Cloud Workload

Issue/Introduction

Steps needed to setup Cisco Duo Single Sign-On IDP with Broadcom Carbon Black Cloud.

Environment

• Carbon Black Cloud: All Supported Versions
• Duo SAML/SSO: All Supported Versions

Resolution

1. Follow steps 1-3 of Duo Single Sign-On for Generic SAML Service Providers
2. Click the "Download XML" button in the "Downloads" section. Provide this .xml file to Broadcom Carbon Black Support
3. Set the "Assertion Consumer Service (ACS) URL to:
   • https://access.broadcom.com/default/saml/v1/sp/acs
4. Under "Map attributes" set:
   • <Email Address> to Email
   • <First Name> to FirstName
   • <Last Name> to LastName
5. Ask Broadcom Carbon Black for the "audience uri".
6. Enter the audience uri that was provided by Broadcom into "Entity ID" field within Duo.