Merge pull request #90212 from v-viinde/velpicsamloneclickupdate

GitHubber17 · web-flow · commit 0495eac5868f · 2019-10-09T11:58:32.000-07:00
Product Backlog Item 824774: SaaS App Tutorial: Velpic SAML One Click…
diff --git a/articles/active-directory/saas-apps/velpicsaml-tutorial.md b/articles/active-directory/saas-apps/velpicsaml-tutorial.md
@@ -1,5 +1,5 @@
 ---
-title: 'Tutorial: Azure Active Directory integration with Velpic SAML | Microsoft Docs'
+title: 'Tutorial: Azure Active Directory single sign-on (SSO) integration with Velpic SAML | Microsoft Docs'
 description: Learn how to configure single sign-on between Azure Active Directory and Velpic SAML.
 services: active-directory
 documentationCenter: na
@@ -14,138 +14,147 @@ ms.workload: identity
 ms.tgt_pltfrm: na
 ms.devlang: na
 ms.topic: tutorial
-ms.date: 04/03/2019
+ms.date: 10/01/2019
 ms.author: jeedes
 
 ms.collection: M365-identity-device-management
 ---
-# Tutorial: Azure Active Directory integration with Velpic SAML
 
-In this tutorial, you learn how to integrate Velpic SAML with Azure Active Directory (Azure AD).
-Integrating Velpic SAML with Azure AD provides you with the following benefits:
+# Tutorial: Azure Active Directory single sign-on (SSO) integration with Velpic SAML
 
-* You can control in Azure AD who has access to Velpic SAML.
-* You can enable your users to be automatically signed-in to Velpic SAML (Single Sign-On) with their Azure AD accounts.
-* You can manage your accounts in one central location - the Azure portal.
+In this tutorial, you'll learn how to integrate Velpic SAML with Azure Active Directory (Azure AD). When you integrate Velpic SAML with Azure AD, you can:
 
-If you want to know more details about SaaS app integration with Azure AD, see [What is application access and single sign-on with Azure Active Directory](https://docs.microsoft.com/azure/active-directory/active-directory-appssoaccess-whatis).
-If you don't have an Azure subscription, [create a free account](https://azure.microsoft.com/free/) before you begin.
+* Control in Azure AD who has access to Velpic SAML.
+* Enable your users to be automatically signed-in to Velpic SAML with their Azure AD accounts.
+* Manage your accounts in one central location - the Azure portal.
+
+To learn more about SaaS app integration with Azure AD, see [What is application access and single sign-on with Azure Active Directory](https://docs.microsoft.com/azure/active-directory/active-directory-appssoaccess-whatis).
 
 ## Prerequisites
 
-To configure Azure AD integration with Velpic SAML, you need the following items:
+To get started, you need the following items:
 
-* An Azure AD subscription. If you don't have an Azure AD environment, you can get a [free account](https://azure.microsoft.com/free/)
-* Velpic SAML single sign-on enabled subscription
+* An Azure AD subscription. If you don't have a subscription, you can get a [free account](https://azure.microsoft.com/free/).
+* Velpic SAML single sign-on (SSO) enabled subscription.
 
 ## Scenario description
 
-In this tutorial, you configure and test Azure AD single sign-on in a test environment.
+In this tutorial, you configure and test Azure AD SSO in a test environment.
 
 * Velpic SAML supports **SP** initiated SSO
 
 ## Adding Velpic SAML from the gallery
 
 To configure the integration of Velpic SAML into Azure AD, you need to add Velpic SAML from the gallery to your list of managed SaaS apps.
 
-**To add Velpic SAML from the gallery, perform the following steps:**
-
-1. In the **[Azure portal](https://portal.azure.com)**, on the left navigation panel, click **Azure Active Directory** icon.
-
-	![The Azure Active Directory button](common/select-azuread.png)
+1. Sign in to the [Azure portal](https://portal.azure.com) using either a work or school account, or a personal Microsoft account.
+1. On the left navigation pane, select the **Azure Active Directory** service.
+1. Navigate to **Enterprise Applications** and then select **All Applications**.
+1. To add new application, select **New application**.
+1. In the **Add from the gallery** section, type **Velpic SAML** in the search box.
+1. Select **Velpic SAML** from results panel and then add the app. Wait a few seconds while the app is added to your tenant.    
 
-2. Navigate to **Enterprise Applications** and then select the **All Applications** option.
+## Configure and test Azure AD single sign-on for Velpic SAML
 
-	![The Enterprise applications blade](common/enterprise-applications.png)
+Configure and test Azure AD SSO with Velpic SAML using a test user called **B.Simon**. For SSO to work, you need to establish a link relationship between an Azure AD user and the related user in Velpic SAML.
 
-3. To add new application, click **New application** button on the top of dialog.
+To configure and test Azure AD SSO with Velpic SAML, complete the following building blocks:
 
-	![The New application button](common/add-new-app.png)
+1. **[Configure Azure AD SSO](#configure-azure-ad-sso)** - to enable your users to use this feature.
+    1. **[Create an Azure AD test user](#create-an-azure-ad-test-user)** - to test Azure AD single sign-on with B.Simon.
+    1. **[Assign the Azure AD test user](#assign-the-azure-ad-test-user)** - to enable B.Simon to use Azure AD single sign-on.
+1. **[Configure Velpic SAML SSO](#configure-velpic-saml-sso)** - to configure the single sign-on settings on application side.
+    1. **[Create Velpic SAML test user](#create-velpic-saml-test-user)** - to have a counterpart of B.Simon in Velpic SAML that is linked to the Azure AD representation of user.
+1. **[Test SSO](#test-sso)** - to verify whether the configuration works.
 
-4. In the search box, type **Velpic SAML**, select **Velpic SAML** from result panel then click **Add** button to add the application.
+## Configure Azure AD SSO
 
-	![Velpic SAML in the results list](common/search-new-app.png)
+Follow these steps to enable Azure AD SSO in the Azure portal.
 
-## Configure and test Azure AD single sign-on
+1. In the [Azure portal](https://portal.azure.com/), on the **Velpic SAML** application integration page, find the **Manage** section and select **single sign-on**.
+1. On the **Select a single sign-on method** page, select **SAML**.
+1. On the **Set up single sign-on with SAML** page, click the edit/pen icon for **Basic SAML Configuration** to edit the settings.
 
-In this section, you configure and test Azure AD single sign-on with Velpic SAML based on a test user called **Britta Simon**.
-For single sign-on to work, a link relationship between an Azure AD user and the related user in Velpic SAML needs to be established.
+   ![Edit Basic SAML Configuration](common/edit-urls.png)
 
-To configure and test Azure AD single sign-on with Velpic SAML, you need to complete the following building blocks:
+1. On the **Basic SAML Configuration** section, enter the values for the following fields:
 
-1. **[Configure Azure AD Single Sign-On](#configure-azure-ad-single-sign-on)** - to enable your users to use this feature.
-2. **[Configure Velpic SAML Single Sign-On](#configure-velpic-saml-single-sign-on)** - to configure the Single Sign-On settings on application side.
-3. **[Create an Azure AD test user](#create-an-azure-ad-test-user)** - to test Azure AD single sign-on with Britta Simon.
-4. **[Assign the Azure AD test user](#assign-the-azure-ad-test-user)** - to enable Britta Simon to use Azure AD single sign-on.
-5. **[Create Velpic SAML test user](#create-velpic-saml-test-user)** - to have a counterpart of Britta Simon in Velpic SAML that is linked to the Azure AD representation of user.
-6. **[Test single sign-on](#test-single-sign-on)** - to verify whether the configuration works.
-
-### Configure Azure AD single sign-on
+	a. In the **Sign on URL** text box, type a URL using the following pattern:
+    `https://<sub-domain>.velpicsaml.net`
 
-In this section, you enable Azure AD single sign-on in the Azure portal.
+    b. In the **Identifier (Entity ID)** text box, type a URL using the following pattern:
+    `https://auth.velpic.com/saml/v2/<entity-id>/login`
 
-To configure Azure AD single sign-on with Velpic SAML, perform the following steps:
+	> [!NOTE]
+	> Please note that the Sign on URL will be provided by the Velpic SAML team and Identifier value will be available when you configure the SSO Plugin on Velpic SAML side. You need to copy that value from Velpic SAML application  page and paste it here.
 
-1. In the [Azure portal](https://portal.azure.com/), on the **Velpic SAML** application integration page, select **Single sign-on**.
+1. On the **Set up single sign-on with SAML** page, in the **SAML Signing Certificate** section,  find **Federation Metadata XML** and select **Download** to download the certificate and save it on your computer.
 
-    ![Configure single sign-on link](common/select-sso.png)
+	![The Certificate download link](common/metadataxml.png)
 
-2. On the **Select a Single sign-on method** dialog, select **SAML/WS-Fed** mode to enable single sign-on.
+1. On the **Set up Velpic SAML** section, copy the appropriate URL(s) based on your requirement.
 
-    ![Single sign-on select mode](common/select-saml-option.png)
+	![Copy configuration URLs](common/copy-configuration-urls.png)
 
-3. On the **Set up Single Sign-On with SAML** page, click **Edit** icon to open **Basic SAML Configuration** dialog.
+### Create an Azure AD test user
 
-	![Edit Basic SAML Configuration](common/edit-urls.png)
+In this section, you'll create a test user in the Azure portal called B.Simon.
 
-4. On the **Basic SAML Configuration** section, perform the following steps:
+1. From the left pane in the Azure portal, select **Azure Active Directory**, select **Users**, and then select **All users**.
+1. Select **New user** at the top of the screen.
+1. In the **User** properties, follow these steps:
+   1. In the **Name** field, enter `B.Simon`.  
+   1. In the **User name** field, enter the username@companydomain.extension. For example, `B.Simon@contoso.com`.
+   1. Select the **Show password** check box, and then write down the value that's displayed in the **Password** box.
+   1. Click **Create**.
 
-    ![Velpic SAML Domain and URLs single sign-on information](common/sp-identifier.png)
+### Assign the Azure AD test user
 
-	a. In the **Sign on URL** text box, type a URL using the following pattern:
-    `https://<sub-domain>.velpicsaml.net`
+In this section, you'll enable B.Simon to use Azure single sign-on by granting access to Velpic SAML.
 
-    b. In the **Identifier (Entity ID)** text box, type a URL using the following pattern:
-    `https://auth.velpic.com/saml/v2/<entity-id>/login`
+1. In the Azure portal, select **Enterprise Applications**, and then select **All applications**.
+1. In the applications list, select **Velpic SAML**.
+1. In the app's overview page, find the **Manage** section and select **Users and groups**.
 
-	> [!NOTE]
-	> Please note that the Sign on URL will be provided by the Velpic SAML team and Identifier value will be available when you configure the SSO Plugin on Velpic SAML side. You need to copy that value from Velpic SAML application  page and paste it here.
+   ![The "Users and groups" link](common/users-groups-blade.png)
 
-5. On the **Set up Single Sign-On with SAML** page, in the **SAML Signing Certificate** section, click **Download** to download the **Federation Metadata XML** from the given options as per your requirement and save it on your computer.
+1. Select **Add user**, then select **Users and groups** in the **Add Assignment** dialog.
 
-	![The Certificate download link](common/metadataxml.png)
+	![The Add User link](common/add-assign-user.png)
 
-6. On the **Set up Velpic SAML** section, copy the appropriate URL(s) as per your requirement.
+1. In the **Users and groups** dialog, select **B.Simon** from the Users list, then click the **Select** button at the bottom of the screen.
+1. If you're expecting any role value in the SAML assertion, in the **Select Role** dialog, select the appropriate role for the user from the list and then click the **Select** button at the bottom of the screen.
+1. In the **Add Assignment** dialog, click the **Assign** button.
 
-	![Copy configuration URLs](common/copy-configuration-urls.png)
+## Configure Velpic SAML SSO
 
-	a. Login URL
+1. To automate the configuration within Velpic SAML, you need to install **My Apps Secure Sign-in browser extension** by clicking **Install the extension**.
 
-	b. Azure AD Identifier
+	![My apps extension](common/install-myappssecure-extension.png)
 
-	c. Logout URL
+2. After adding extension to the browser, click on **Set up Velpic SAML** will direct you to the Velpic SAML application. From there, provide the admin credentials to sign into Velpic SAML. The browser extension will automatically configure the application for you and automate steps 3-8.
 
-### Configure Velpic SAML Single Sign-On
+	![Setup configuration](common/setup-sso.png)
 
-1. In a different web browser window, sign into your Velpic SAML company site as an administrator.
+3. If you want to setup Velpic SAML manually, open a new web browser window and sign into your Velpic SAML company site as an administrator and perform the following steps:
 
-2. Click on **Manage** tab and go to **Integration** section where you need to click on **Plugins** button to create new plugin for Sign-In.
+4. Click on **Manage** tab and go to **Integration** section where you need to click on **Plugins** button to create new plugin for Sign-In.
 
 	![Plugin](./media/velpicsaml-tutorial/velpic_1.png)
 
-3. Click on the **‘Add plugin’** button.
+5. Click on the **‘Add plugin’** button.
 	
 	![Plugin](./media/velpicsaml-tutorial/velpic_2.png)
 
-4. Click on the **SAML** tile in the Add Plugin page.
+6. Click on the **SAML** tile in the Add Plugin page.
 	
 	![Plugin](./media/velpicsaml-tutorial/velpic_3.png)
 
-5. Enter the name of the new SAML plugin and click the **‘Add’** button.
+7. Enter the name of the new SAML plugin and click the **‘Add’** button.
 
 	![Plugin](./media/velpicsaml-tutorial/velpic_4.png)
 
-6. Enter the details as follows:
+8. Enter the details as follows:
 
 	![Plugin](./media/velpicsaml-tutorial/velpic_5.png)
 
@@ -161,56 +170,6 @@ To configure Azure AD single sign-on with Velpic SAML, perform the following ste
 	
 	f. Click **Save**.
 
-### Create an Azure AD test user 
-
-The objective of this section is to create a test user in the Azure portal called Britta Simon.
-
-1. In the Azure portal, in the left pane, select **Azure Active Directory**, select **Users**, and then select **All users**.
-
-    ![The "Users and groups" and "All users" links](common/users.png)
-
-2. Select **New user** at the top of the screen.
-
-    ![New user Button](common/new-user.png)
-
-3. In the User properties, perform the following steps.
-
-    ![The User dialog box](common/user-properties.png)
-
-    a. In the **Name** field enter **BrittaSimon**.
-  
-    b. In the **User name** field type `brittasimon@yourcompanydomain.extension`. For example, BrittaSimon@contoso.com
-
-    c. Select **Show password** check box, and then write down the value that's displayed in the Password box.
-
-    d. Click **Create**.
-
-### Assign the Azure AD test user
-
-In this section, you enable Britta Simon to use Azure single sign-on by granting access to Velpic SAML.
-
-1. In the Azure portal, select **Enterprise Applications**, select **All applications**, then select **Velpic SAML**.
-
-	![Enterprise applications blade](common/enterprise-applications.png)
-
-2. In the applications list, select **Velpic SAML**.
-
-	![The Velpic SAML link in the Applications list](common/all-applications.png)
-
-3. In the menu on the left, select **Users and groups**.
-
-    ![The "Users and groups" link](common/users-groups-blade.png)
-
-4. Click the **Add user** button, then select **Users and groups** in the **Add Assignment** dialog.
-
-    ![The Add Assignment pane](common/add-assign-user.png)
-
-5. In the **Users and groups** dialog select **Britta Simon** in the Users list, then click the **Select** button at the bottom of the screen.
-
-6. If you are expecting any role value in the SAML assertion then in the **Select Role** dialog select the appropriate role for the user from the list, then click the **Select** button at the bottom of the screen.
-
-7. In the **Add Assignment** dialog click the **Assign** button.
-
 ### Create Velpic SAML test user
 
 This step is usually not required as the application supports just in time user provisioning. If the automatic user provisioning is not enabled then manual user creation can be done as described below.
@@ -225,19 +184,19 @@ Sign into your Velpic SAML company site as an administrator and perform followin
 
 	![user](./media/velpicsaml-tutorial/velpic_8.png)
 	
-	a. In the **First Name** textbox, type the first name of Britta.
+	a. In the **First Name** textbox, type the first name of B.
 
 	b. In the **Last Name** textbox, type the last name of Simon.
 
-	c. In the **User Name** textbox, type the user name of Britta Simon.
+	c. In the **User Name** textbox, type the user name of B.Simon.
 
-	d. In the **Email** textbox, type the email address of Brittasimon@contoso.com account.
+	d. In the **Email** textbox, type the email address of B.Simon@contoso.com account.
 
 	e. Rest of the information is optional, you can fill it if needed.
 	
 	f. Click **SAVE**.
 
-### Test single sign-on 
+## Test SSO 
 
 In this section, you test your Azure AD single sign-on configuration using the Access Panel.
 
@@ -247,11 +206,13 @@ In this section, you test your Azure AD single sign-on configuration using the A
 
 1. Click on the **‘Log In With Azure AD’** button to log in to Velpic using your Azure AD account.
 
-## Additional Resources
+## Additional resources
+
+- [ List of Tutorials on How to Integrate SaaS Apps with Azure Active Directory ](https://docs.microsoft.com/azure/active-directory/active-directory-saas-tutorial-list)
 
-- [List of Tutorials on How to Integrate SaaS Apps with Azure Active Directory](https://docs.microsoft.com/azure/active-directory/active-directory-saas-tutorial-list)
+- [What is application access and single sign-on with Azure Active Directory? ](https://docs.microsoft.com/azure/active-directory/active-directory-appssoaccess-whatis)
 
-- [What is application access and single sign-on with Azure Active Directory?](https://docs.microsoft.com/azure/active-directory/active-directory-appssoaccess-whatis)
+- [What is conditional access in Azure Active Directory?](https://docs.microsoft.com/azure/active-directory/conditional-access/overview)
 
-- [What is Conditional Access in Azure Active Directory?](https://docs.microsoft.com/azure/active-directory/conditional-access/overview)
+- [Try Velpic SAML with Azure AD](https://aad.portal.azure.com/)
 
