forked from MicrosoftDocs/azure-docs
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge branch 'master' of https://github.com/MicrosoftDocs/azure-docs-pr
- Loading branch information
Showing
66 changed files
with
698 additions
and
92 deletions.
There are no files selected for viewing
Validating CODEOWNERS rules …
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
239 changes: 239 additions & 0 deletions
239
articles/active-directory/active-directory-saas-safetynet-tutorial.md
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,239 @@ | ||
--- | ||
title: 'Tutorial: Azure Active Directory integration with SafetyNet | Microsoft Docs' | ||
description: Learn how to configure single sign-on between Azure Active Directory and SafetyNet. | ||
services: active-directory | ||
documentationCenter: na | ||
author: jeevansd | ||
manager: femila | ||
ms.reviewer: joflore | ||
|
||
ms.assetid: caa96ea2-da21-4529-8fab-0e06367beb40 | ||
ms.service: active-directory | ||
ms.workload: identity | ||
ms.tgt_pltfrm: na | ||
ms.devlang: na | ||
ms.topic: article | ||
ms.date: 03/23/2018 | ||
ms.author: jeedes | ||
|
||
--- | ||
# Tutorial: Azure Active Directory integration with SafetyNet | ||
|
||
In this tutorial, you learn how to integrate SafetyNet with Azure Active Directory (Azure AD). | ||
|
||
Integrating SafetyNet with Azure AD provides you with the following benefits: | ||
|
||
- You can control in Azure AD who has access to SafetyNet. | ||
- You can enable your users to automatically get signed-on to SafetyNet (Single Sign-On) with their Azure AD accounts. | ||
- You can manage your accounts in one central location - the Azure portal. | ||
|
||
If you want to know more details about SaaS app integration with Azure AD, see [what is application access and single sign-on with Azure Active Directory](active-directory-appssoaccess-whatis.md). | ||
|
||
## Prerequisites | ||
|
||
To configure Azure AD integration with SafetyNet, you need the following items: | ||
|
||
- An Azure AD subscription | ||
- A SafetyNet single-sign on enabled subscription | ||
|
||
> [!NOTE] | ||
> To test the steps in this tutorial, we do not recommend using a production environment. | ||
To test the steps in this tutorial, you should follow these recommendations: | ||
|
||
- Do not use your production environment, unless it is necessary. | ||
- If you don't have an Azure AD trial environment, you can [get a one-month trial](https://azure.microsoft.com/pricing/free-trial/). | ||
|
||
## Scenario description | ||
In this tutorial, you test Azure AD single sign-on in a test environment. | ||
The scenario outlined in this tutorial consists of two main building blocks: | ||
|
||
1. Adding SafetyNet from the gallery | ||
2. Configuring and testing Azure AD single sign-on | ||
|
||
## Adding SafetyNet from the gallery | ||
To configure the integration of SafetyNet into Azure AD, you need to add SafetyNet from the gallery to your list of managed SaaS apps. | ||
|
||
**To add SafetyNet from the gallery, perform the following steps:** | ||
|
||
1. In the **[Azure portal](https://portal.azure.com)**, on the left navigation panel, click **Azure Active Directory** icon. | ||
|
||
![The Azure Active Directory button][1] | ||
|
||
2. Navigate to **Enterprise applications**. Then go to **All applications**. | ||
|
||
![The Enterprise applications blade][2] | ||
|
||
3. To add new application, click **New application** button on the top of dialog. | ||
|
||
![The New application button][3] | ||
|
||
4. In the search box, type **SafetyNet**, select **SafetyNet** from result panel then click **Add** button to add the application. | ||
|
||
![SafetyNet in the results list](./media/active-directory-saas-safetynet-tutorial/tutorial_safetynet_addfromgallery.png) | ||
|
||
## Configure and test Azure AD single sign-on | ||
|
||
In this section, you configure and test Azure AD single sign-on with SafetyNet based on a test user called "Britta Simon". | ||
|
||
For single sign-on to work, Azure AD needs to know what the counterpart user in SafetyNet is to a user in Azure AD. In other words, a link relationship between an Azure AD user and the related user in SafetyNet needs to be established. | ||
|
||
To configure and test Azure AD single sign-on with SafetyNet, you need to complete the following building blocks: | ||
|
||
1. **[Configure Azure AD Single Sign-On](#configure-azure-ad-single-sign-on)** - to enable your users to use this feature. | ||
2. **[Create an Azure AD test user](#create-an-azure-ad-test-user)** - to test Azure AD single sign-on with Britta Simon. | ||
3. **[Create a SafetyNet test user](#create-a-safetynet-test-user)** - to have a counterpart of Britta Simon in SafetyNet that is linked to the Azure AD representation of user. | ||
4. **[Assign the Azure AD test user](#assign-the-azure-ad-test-user)** - to enable Britta Simon to use Azure AD single sign-on. | ||
5. **[Test single sign-on](#test-single-sign-on)** - to verify whether the configuration works. | ||
|
||
### Configure Azure AD single sign-on | ||
|
||
In this section, you enable Azure AD single sign-on in the Azure portal and configure single sign-on in your SafetyNet application. | ||
|
||
**To configure Azure AD single sign-on with SafetyNet, perform the following steps:** | ||
|
||
1. In the Azure portal, on the **SafetyNet** application integration page, click **Single sign-on**. | ||
|
||
![Configure single sign-on link][4] | ||
|
||
2. On the **Single sign-on** dialog, select **Mode** as **SAML-based Sign-on** to enable single sign-on. | ||
|
||
![Single sign-on dialog box](./media/active-directory-saas-safetynet-tutorial/tutorial_safetynet_samlbase.png) | ||
|
||
3. On the **SafetyNet Domain and URLs** section, perform the following steps if you wish to configure the application in **IDP** initiated mode: | ||
|
||
![SafetyNet Domain and URLs single sign-on information](./media/active-directory-saas-safetynet-tutorial/tutorial_safetynet_url.png) | ||
|
||
a. In the **Identifier** textbox, type a URL using the following pattern: `https://<subdomain>.predictivesolutions.com/sp` | ||
|
||
b. In the **Reply URL** textbox, type a URL using the following pattern: `https://<subdomain>.predictivesolutions.com/CRMApp/saml/SSO` | ||
|
||
4. Check **Show advanced URL settings** and perform the following step if you wish to configure the application in **SP** initiated mode: | ||
|
||
![SafetyNet Domain and URLs single sign-on information](./media/active-directory-saas-safetynet-tutorial/tutorial_safetynet_url1.png) | ||
|
||
In the **Sign-on URL** textbox, type a URL using the following pattern: `https://<subdomain>.predictivesolutions.com` | ||
> [!NOTE] | ||
> These values are not real. Update these values with the actual Identifier, Reply URL, and Sign-On URL. Contact [SafetyNet Client support team](mailto:[email protected]) to get these values. | ||
|
||
5. Click **Save** button. | ||
|
||
![Configure Single Sign-On Save button](./media/active-directory-saas-safetynet-tutorial/tutorial_general_400.png) | ||
|
||
6. To generate the **Metadata URL**, perform the following steps: | ||
|
||
a. Click **App registrations**. | ||
|
||
![Configure Single Sign-On](./media/active-directory-saas-safetynet-tutorial/tutorial_safetynet_appregistrations.png) | ||
|
||
b. Click **Endpoints** to open **Endpoints** dialog box. | ||
|
||
![Configure Single Sign-On](./media/active-directory-saas-safetynet-tutorial/tutorial_safetynet_endpointicon.png) | ||
|
||
c. Click the copy button to copy **FEDERATION METADATA DOCUMENT** url and paste it into notepad. | ||
|
||
![Configure Single Sign-On](./media/active-directory-saas-safetynet-tutorial/tutorial_safetynet_endpoint.png) | ||
|
||
d. Now go to the property page of **SafetyNet** and copy the **Application Id** using **Copy** button and paste it into notepad. | ||
|
||
![Configure Single Sign-On](./media/active-directory-saas-safetynet-tutorial/tutorial_safetynet_appid.png) | ||
|
||
e. Generate the **Metadata URL** using the following pattern:`<FEDERATION METADATA DOCUMENT url>?appid=<application id>` | ||
|
||
7. To configure single sign-on on **SafetyNet** side, you need to send the generated **Metadata URL** to [SafetyNet support team](mailto:[email protected]). They set this setting to have the SAML SSO connection set properly on both sides. | ||
|
||
### Create an Azure AD test user | ||
|
||
The objective of this section is to create a test user in the Azure portal called Britta Simon. | ||
|
||
![Create an Azure AD test user][100] | ||
|
||
**To create a test user in Azure AD, perform the following steps:** | ||
|
||
1. In the Azure portal, in the left pane, click the **Azure Active Directory** button. | ||
|
||
![The Azure Active Directory button](./media/active-directory-saas-safetynet-tutorial/create_aaduser_01.png) | ||
|
||
2. To display the list of users, go to **Users and groups**, and then click **All users**. | ||
|
||
![The "Users and groups" and "All users" links](./media/active-directory-saas-safetynet-tutorial/create_aaduser_02.png) | ||
|
||
3. To open the **User** dialog box, click **Add** at the top of the **All Users** dialog box. | ||
|
||
![The Add button](./media/active-directory-saas-safetynet-tutorial/create_aaduser_03.png) | ||
|
||
4. In the **User** dialog box, perform the following steps: | ||
|
||
![The User dialog box](./media/active-directory-saas-safetynet-tutorial/create_aaduser_04.png) | ||
|
||
a. In the **Name** box, type **BrittaSimon**. | ||
|
||
b. In the **User name** box, type the email address of user Britta Simon. | ||
|
||
c. Select the **Show Password** check box, and then write down the value that's displayed in the **Password** box. | ||
|
||
d. Click **Create**. | ||
|
||
### Create a SafetyNet test user | ||
|
||
In this section, you create a user called Britta Simon in SafetyNet. Work with [SafetyNet support team](mailto:[email protected]) to add the users in the SafetyNet platform. Users must be created and activated before you use single sign-on | ||
|
||
### Assign the Azure AD test user | ||
|
||
In this section, you enable Britta Simon to use Azure single sign-on by granting access to SafetyNet. | ||
|
||
![Assign the user role][200] | ||
|
||
**To assign Britta Simon to SafetyNet, perform the following steps:** | ||
|
||
1. In the Azure portal, open the applications view, and then navigate to the directory view and go to **Enterprise applications** then click **All applications**. | ||
|
||
![Assign User][201] | ||
|
||
2. In the applications list, select **SafetyNet**. | ||
|
||
![The SafetyNet link in the Applications list](./media/active-directory-saas-safetynet-tutorial/tutorial_safetynet_app.png) | ||
|
||
3. In the menu on the left, click **Users and groups**. | ||
|
||
![The "Users and groups" link][202] | ||
|
||
4. Click **Add** button. Then select **Users and groups** on **Add Assignment** dialog. | ||
|
||
![The Add Assignment pane][203] | ||
|
||
5. On **Users and groups** dialog, select **Britta Simon** in the Users list. | ||
|
||
6. Click **Select** button on **Users and groups** dialog. | ||
|
||
7. Click **Assign** button on **Add Assignment** dialog. | ||
|
||
### Test single sign-on | ||
|
||
In this section, you test your Azure AD single sign-on configuration using the Access Panel. | ||
|
||
When you click the SafetyNet tile in the Access Panel, you should get automatically signed-on to your SafetyNet application. | ||
For more information about the Access Panel, see [Introduction to the Access Panel](active-directory-saas-access-panel-introduction.md). | ||
|
||
## Additional resources | ||
|
||
* [List of Tutorials on How to Integrate SaaS Apps with Azure Active Directory](active-directory-saas-tutorial-list.md) | ||
* [What is application access and single sign-on with Azure Active Directory?](active-directory-appssoaccess-whatis.md) | ||
|
||
|
||
|
||
<!--Image references--> | ||
|
||
[1]: ./media/active-directory-saas-safetynet-tutorial/tutorial_general_01.png | ||
[2]: ./media/active-directory-saas-safetynet-tutorial/tutorial_general_02.png | ||
[3]: ./media/active-directory-saas-safetynet-tutorial/tutorial_general_03.png | ||
[4]: ./media/active-directory-saas-safetynet-tutorial/tutorial_general_04.png | ||
|
||
[100]: ./media/active-directory-saas-safetynet-tutorial/tutorial_general_100.png | ||
|
||
[200]: ./media/active-directory-saas-safetynet-tutorial/tutorial_general_200.png | ||
[201]: ./media/active-directory-saas-safetynet-tutorial/tutorial_general_201.png | ||
[202]: ./media/active-directory-saas-safetynet-tutorial/tutorial_general_202.png | ||
[203]: ./media/active-directory-saas-safetynet-tutorial/tutorial_general_203.png | ||
|
Binary file added
BIN
+4.07 KB
...-directory/media/active-directory-saas-safetynet-tutorial/create_aaduser_01.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added
BIN
+17.8 KB
...-directory/media/active-directory-saas-safetynet-tutorial/create_aaduser_02.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added
BIN
+2.04 KB
...-directory/media/active-directory-saas-safetynet-tutorial/create_aaduser_03.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added
BIN
+11 KB
...-directory/media/active-directory-saas-safetynet-tutorial/create_aaduser_04.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added
BIN
+581 Bytes
...ectory/media/active-directory-saas-safetynet-tutorial/tutorial_attribute_04.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added
BIN
+6.07 KB
...ectory/media/active-directory-saas-safetynet-tutorial/tutorial_attribute_05.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added
BIN
+4.07 KB
...irectory/media/active-directory-saas-safetynet-tutorial/tutorial_general_01.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added
BIN
+28.7 KB
...irectory/media/active-directory-saas-safetynet-tutorial/tutorial_general_02.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added
BIN
+1.9 KB
...irectory/media/active-directory-saas-safetynet-tutorial/tutorial_general_03.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added
BIN
+6.25 KB
...irectory/media/active-directory-saas-safetynet-tutorial/tutorial_general_04.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added
BIN
+3.36 KB
...rectory/media/active-directory-saas-safetynet-tutorial/tutorial_general_100.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added
BIN
+2.4 KB
...rectory/media/active-directory-saas-safetynet-tutorial/tutorial_general_200.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added
BIN
+12.8 KB
...rectory/media/active-directory-saas-safetynet-tutorial/tutorial_general_201.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added
BIN
+6.22 KB
...rectory/media/active-directory-saas-safetynet-tutorial/tutorial_general_202.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added
BIN
+11.2 KB
...rectory/media/active-directory-saas-safetynet-tutorial/tutorial_general_203.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added
BIN
+1.88 KB
...rectory/media/active-directory-saas-safetynet-tutorial/tutorial_general_400.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added
BIN
+9.01 KB
.../active-directory-saas-safetynet-tutorial/tutorial_safetynet_addfromgallery.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added
BIN
+10.7 KB
...ctory/media/active-directory-saas-safetynet-tutorial/tutorial_safetynet_app.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added
BIN
+37.1 KB
...ory/media/active-directory-saas-safetynet-tutorial/tutorial_safetynet_appid.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added
BIN
+12.2 KB
...ctive-directory-saas-safetynet-tutorial/tutorial_safetynet_appregistrations.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added
BIN
+8.3 KB
...dia/active-directory-saas-safetynet-tutorial/tutorial_safetynet_certificate.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added
BIN
+5.49 KB
...media/active-directory-saas-safetynet-tutorial/tutorial_safetynet_configure.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added
BIN
+6.22 KB
.../media/active-directory-saas-safetynet-tutorial/tutorial_safetynet_endpoint.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added
BIN
+2.21 KB
...ia/active-directory-saas-safetynet-tutorial/tutorial_safetynet_endpointicon.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added
BIN
+6.59 KB
.../media/active-directory-saas-safetynet-tutorial/tutorial_safetynet_samlbase.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added
BIN
+9.2 KB
...ctory/media/active-directory-saas-safetynet-tutorial/tutorial_safetynet_url.png
Oops, something went wrong.
Binary file added
BIN
+3.42 KB
...tory/media/active-directory-saas-safetynet-tutorial/tutorial_safetynet_url1.png
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.