Configuring SAML with Azure (New)

Configuring SAML with Azure (New)


Step 1:

Open the Azure Portal--->Enterprise Applications.


Step 2:

Select the created Enterprise Application and get started with Set up Single Sign-On.


Step 3:

Edit the basic SAML Configuration.


Step 4:

Copy the Entity ID from SDPMSP and place the entity ID in Azure Identifier.
Copy the Assertion Consumer URL from SDPMSP and place the url in Azure Reply URL
Copy the Single Log Out Service URL from SDPMSP and place the url in Azure Log Out URL.


Step 5:

Edit the Attribute Claim Section



Step 6:

Select the required claim name



Step 7:

Enter the name id format and the same format should be used in SDPMSP

For the Transient and Persistent source attribute will be user.display name.
For the E-mail Address source attribute will be user.mail.



Step 8:

Edit SAML Certificates


Download the Raw Certificate File and this file should be uploaded in SDPMSP.



Step 9:
Under Set up SAML
Copy the login and log out URL and paste it in SDPMSP


Step 10:

Save the configuration in SDPMSP.
Now the user will be able to log in via.SAML with Azure.

Additional Attributes in Azure:
In SDP we just need to fill the "SDP field" vs the "Claim name" mapping. From the IDP side, we also need to map the "Claim name" vs "Claim Attribute". In simpler terms, we need to provide the claim name ("EmailAddress") on the left and choose the attribute/value that we want to send ("user.mail") on the right. Let's look at the configuration from a few popular IDPs.



 

 


                  New to ADManager Plus?

                    New to ADSelfService Plus?

                      • Related Articles

                      • How to configure SAML with Azure AD (Old KB)

                        This guide will help us configure SAML for users who want to use Azure AD as their IdP and also give you insights on a few issues that you might run into while configuring SAML in an Azure Environment. In an ideal environment, customers will have an ...
                      • Unable to configure SAML using OneLogin -Uploaded Certificate is Invalid

                        Upon configuring SAML, if you come across the below errors: Uploaded Certificate is Invalid (Happens with .PEM cert generated in OneLogin) failed to update IdP details. Check logs for details Verify the below trace in the Logs: ...
                      • Configuring SAML with ADFS

                        Step 1: Open the ADFS management application Step 2: Right-click Relying Party trust and choose Add Relying Party Trust. The Add Relying Party Trust Wizard opens. Step 3: Choose Claims Aware and click Start Step 4: Choose Enter data about the relying ...
                      • SAML FAQ's

                        Please find the list of frequently asked queries in SAML 1. I have enabled SAML but still could not find a way to log in using SAML Since the application has multi-tenant feature there are certain security added to the SAML login. In a SAML ...
                      • Page crashed exception thrown while downloading metadata.xml in the SAML configuration page.

                        Applicable only from build10523 Unable to download Metadata.xml from the SAML configuration page? Workaround-1: Please access the following URL to download metadata.xml https://localhost:8523/servlet/SamlMetaServlet?id=<id> Get the id from the ...