---
updatedAt: 2026-07-16T20:51:45.000Z
---

# SecureAuth Arculix | RS

Arculix by SecureAuth allows BeyondTrust customers to securely enable efficient access to Remote Support, while providing a flexible and frictionless user experience.

This integration is based on Arculix SAML (SP-initiated) integration, and is supported for Representatives and Public Portals.

This integration requires a working Arculix test User with the Arculix mobile App that can connect to the Arculix SAML Applications portal.

Before setting up the integration, create a Group Policy in BeyondTrust Remote Support for Arculix users to authenticate to Remote Support.

> ℹ️
>
> For more information, see
>
> * Arculix SAML (SP-initiated) integration]\(<https://docs.secureauth.com/arculix/en/arculix-saml--sp-initiated--integration.html>)
> * [Manage users](https://docs.secureauth.com/arculix/en/manage-users.html)  in Acrulix
> * [Arculix by SecureAuth overview](https://docs.secureauth.com/arculix/en/arculix-by-secureauth-overview.html).
> * [Use SAML for Single Sign-On Authentication](https://docs.beyondtrust.com/rs/docs/saml)
> * [Group Policies](docs:cloud-group-policies)

## Configure BeyondTrust for integration with Arculix

Go to the administrative **/login** interface of your BeyondTrust Remote Support instance and follow these steps:

1. Click **Users & Security**, then click **Security Providers**.
2. Click **+ADD**.
3. Select **SAML For Representatives** or **SAML for Public Portals**. Steps and images below are for SAML for representatives. The process is similar for public portals.
4. Enter your desired name, such as Arculix.
5. Refer to the Arculix documentation (link above) to obtain the **Entity ID**, **Single Sign-on Service URL**, and the **Certificate**.
6. Note the information in the **Service Provider Settings**. This is required when configuring Arculix.
7. Verify that **User Attribute Settings** match the information in Arculix.
8. Configure **Authorization Settings** to match Arculix and assign the default Group Policy. This step is not applicable to **SAML for Public Portals**.

## Configure SecureAuth Arculix

Log in to your Arculix instance and follow these steps:

1. Create a new Application. Use a recognizable name, such as BeyondTrust Remote Support.
2. Click **SAML Service Provider Configuration**.
3. Do not check **Upstream IdP** or **IdP Initiated**.
4. Select **Email** for the **Name Identifier**.
5. For **Issuer or Entity ID**, use generated **Entity ID** from the SAML Configuration in Remote Support, in the **Service Provider Settings**.
6. For **Assertion Consumer Service (ACS) URL**, use generated **Assertion Consumer Service URL** from the SAML Configuration in Remote Support, in the **Service Provider Settings**.
7. Include the following **Asserted Attributes**:
   * Name: e.g. <beyondtrust.demo@arculix.xyz>
   * EmailAddress
   * GivenName
   * Surname
   * Group: This needs to correspond to a Group Policy in Name in Remote Support.
8. For **SAML for Public Portals**, one more configuration step is required in BeyondTrust Remote Support.
   * Click **Public Portals**, then click **Public Sites**.
   * Edit the portal.
   * Ensure **Require SAML Authentication** and **Display Customer Notices** are checked.
   * This step does not apply to **SAML for Representatives**.
9. Assign the new application to a test user.
10. Test the application:
    1. Click the App in the Arculix portal for the test user.
    2. Single Sign-On authenticates to Remote Support.
    3. The test user should have access to Remote Support as per the Group Policy.

For assistance, log into the [Customer Portal](https://beyondtrustcorp.service-now.com/csm) to chat with BeyondTrust Technical Support.