Merge pull request #171204 from bhavana-129/provisioning-7

SaaS App Tutorial: User provisioning connector-7

Author: v-andreaco

articles/active-directory/saas-apps/sigma-computing-tutorial.md

@@ -9,7 +9,7 @@ ms.service: active-directory
 ms.subservice: saas-app-tutorial
 ms.workload: identity
 ms.topic: tutorial
-ms.date: 01/27/2021
+ms.date: 09/01/2021
 ms.author: jeedes
 
 ---
@@ -33,8 +33,9 @@ To get started, you need the following items:
 
 In this tutorial, you configure and test Azure AD SSO in a test environment.
 
-* Sigma Computing supports **SP and IDP** initiated SSO
-* Sigma Computing supports **Just In Time** user provisioning
+* Sigma Computing supports **SP and IDP** initiated SSO.
+* Sigma Computing supports **Just In Time** user provisioning.
+* Sigma Computing supports [Automated user provisioning](sigma-computing-provisioning-tutorial.md).
 
 > [!NOTE]
 > Identifier of this application is a fixed string value so only one instance can be configured in one tenant.
@@ -50,7 +51,6 @@ To configure the integration of Sigma Computing into Azure AD, you need to add S
 1. In the **Add from the gallery** section, type **Sigma Computing** in the search box.
 1. Select **Sigma Computing** from results panel and then add the app. Wait a few seconds while the app is added to your tenant.
 
-
 ## Configure and test Azure AD SSO for Sigma Computing
 
 Configure and test Azure AD SSO with Sigma Computing using a test user called **B.Simon**. For SSO to work, you need to establish a link relationship between an Azure AD user and the related user in Sigma Computing.
@@ -97,6 +97,7 @@ Follow these steps to enable Azure AD SSO in the Azure portal.
 1. On the **Set up Sigma Computing** section, copy the appropriate URL(s) based on your requirement.
 
 	![Copy configuration URLs](common/copy-configuration-urls.png)
+
 ### Create an Azure AD test user
 
 In this section, you'll create a test user in the Azure portal called B.Simon.
@@ -145,6 +146,8 @@ In this section, you'll enable B.Simon to use Azure single sign-on by granting a
 
 In this section, a user called Britta Simon is created in Sigma Computing. Sigma Computing supports just-in-time user provisioning, which is enabled by default. There is no action item for you in this section. If a user doesn't already exist in Sigma Computing, a new one is created after authentication.
 
+Sigma Computing also supports automatic user provisioning, you can find more details [here](./sigma-computing-provisioning-tutorial.md) on how to configure automatic user provisioning.
+
 ## Test SSO 
 
 In this section, you test your Azure AD single sign-on configuration with following options. 

articles/active-directory/saas-apps/signagelive-tutorial.md

@@ -9,92 +9,66 @@ ms.service: active-directory
 ms.subservice: saas-app-tutorial
 ms.workload: identity
 ms.topic: tutorial
-ms.date: 1/11/2019
+ms.date: 09/01/2021
 ms.author: jeedes
 ---
 # Tutorial: Azure Active Directory integration with Signagelive
 
-In this tutorial, you learn how to integrate Signagelive with Azure Active Directory (Azure AD).
-Integrating Signagelive with Azure AD provides you with the following benefits:
+In this tutorial, you'll learn how to integrate Signagelive with Azure Active Directory (Azure AD). When you integrate Signagelive with Azure AD, you can:
 
-* You can control in Azure AD who has access to Signagelive.
-* You can enable your users to be automatically signed in to Signagelive (single sign-on) with their Azure AD accounts.
-* You can manage your accounts in one central location: the Azure portal.
-
-For more information about SaaS app integration with Azure AD, see [What is application access and single sign-on with Azure Active Directory](../manage-apps/what-is-single-sign-on.md). If you don't have an Azure subscription, [create a free account](https://azure.microsoft.com/free/) before you begin.
+* Control in Azure AD who has access to Signagelive.
+* Enable your users to be automatically signed-in to Signagelive with their Azure AD accounts.
+* Manage your accounts in one central location - the Azure portal.
 
 ## Prerequisites
 
-To configure Azure AD integration with Signagelive, you need the following items:
+To get started, you need the following items:
 
-* An Azure AD subscription. If you don't have an Azure AD environment, you can get a [one-month trial](https://azure.microsoft.com/pricing/free-trial/).
-* A Signagelive single-sign-on-enabled subscription.
+* An Azure AD subscription. If you don't have a subscription, you can get a [free account](https://azure.microsoft.com/free/).
+* Signagelive single sign-on (SSO) enabled subscription.
 
 ## Scenario description
 
 In this tutorial, you configure and test Azure AD single sign-on in a test environment.
 
 * Signagelive supports SP-initiated SSO.
+* Signagelive supports [Automated user provisioning](signagelive-provisioning-tutorial.md).
 
 ## Add Signagelive from the gallery
 
-To configure the integration of Signagelive into Azure AD, first add Signagelive from the gallery to your list of managed SaaS apps.
-
-To add Signagelive from the gallery, take the following steps:
-
-1. In the [Azure portal](https://portal.azure.com), in the left pane, select the **Azure Active Directory** icon.
-
-	![The Azure Active Directory button](common/select-azuread.png)
-
-2. Go to **Enterprise Applications**, and then select the **All Applications** option.
-
-	![The Enterprise applications blade](common/enterprise-applications.png)
-
-3. To add a new application, select the  **New application** button at the top of the dialog box.
-
-	![The New application button](common/add-new-app.png)
-
-4. In the search box, enter **Signagelive**. 
-
-	 ![Signagelive in the results list](common/search-new-app.png)
+To configure the integration of Signagelive into Azure AD, you need to add Signagelive from the gallery to your list of managed SaaS apps.
 
-5. Select **Signagelive** from the results pane, and then select the **Add** button to add the application.
+1. Sign in to the Azure portal using either a work or school account, or a personal Microsoft account.
+1. On the left navigation pane, select the **Azure Active Directory** service.
+1. Navigate to **Enterprise Applications** and then select **All Applications**.
+1. To add new application, select **New application**.
+1. In the **Add from the gallery** section, type **Signagelive** in the search box.
+1. Select **Signagelive** from results panel and then add the app. Wait a few seconds while the app is added to your tenant.
 
-## Configure and test Azure AD single sign-on
+## Configure and test Azure AD SSO for Signagelive
 
-In this section, you configure and test Azure AD single sign-on with Signagelive based on a test user called **Britta Simon**.
-For single sign-on to work, you must establish a link between an Azure AD user and the related user in Signagelive.
+Configure and test Azure AD SSO with Signagelive using a test user called **B.Simon**. For SSO to work, you need to establish a link relationship between an Azure AD user and the related user in Signagelive.
 
-To configure and test Azure AD single sign-on with Signagelive, first complete the following building blocks:
+To configure and test Azure AD SSO with Signagelive, perform the following steps:
 
-1. [Configure Azure AD single sign-on](#configure-azure-ad-single-sign-on) to enable your users to use this feature.
-2. [Configure Signagelive single sign-on](#configure-signagelive-single-sign-on) to configure the single sign-on settings on the application side.
-3. [Create an Azure AD test user](#create-an-azure-ad-test-user) to test Azure AD single sign-on with Britta Simon.
-4. [Assign the Azure AD test user](#assign-the-azure-ad-test-user) to enable Britta Simon to use Azure AD single sign-on.
-5. [Create a Signagelive test user](#create-a-signagelive-test-user) to have a counterpart of Britta Simon in Signagelive that is linked to the Azure AD representation of the user.
-6. [Test single sign-on](#test-single-sign-on) to verify that the configuration works.
+1. **[Configure Azure AD SSO](#configure-azure-ad-sso)** - to enable your users to use this feature.
+    1. **[Create an Azure AD test user](#create-an-azure-ad-test-user)** - to test Azure AD single sign-on with B.Simon.
+    1. **[Assign the Azure AD test user](#assign-the-azure-ad-test-user)** - to enable B.Simon to use Azure AD single sign-on.
+1. **[Configure Signagelive SSO](#configure-signagelive-sso)** - to configure the single sign-on settings on application side.
+    1. **[Create Signagelive test user](#create-signagelive-test-user)** - to have a counterpart of B.Simon in Signagelive that is linked to the Azure AD representation of user.
+1. **[Test SSO](#test-sso)** - to verify whether the configuration works.
 
-### Configure Azure AD single sign-on
+## Configure Azure AD SSO
 
-In this section, you enable Azure AD single sign-on in the Azure portal.
+Follow these steps to enable Azure AD SSO in the Azure portal.
 
-To configure Azure AD single sign-on with Signagelive, take the following steps:
+1. In the Azure portal, on the **Signagelive** application integration page, find the **Manage** section and select **single sign-on**.
+1. On the **Select a single sign-on method** page, select **SAML**.
+1. On the **Set up single sign-on with SAML** page, click the pencil icon for **Basic SAML Configuration** to edit the settings.
 
-1. In the [Azure portal](https://portal.azure.com/), on the **Signagelive** application integration page, select **Single sign-on**.
+   ![Edit Basic SAML Configuration](common/edit-urls.png)
 
-    ![Configure single sign-on link](common/select-sso.png)
-
-2. In the **Select a single sign-on method** dialog box, select **SAML** to enable single sign-on.
-
-    ![Single sign-on select mode](common/select-saml-option.png)
-
-3. On the **Set up single sign-on with SAML** page, select **Edit** to open the **Basic SAML Configuration** dialog box.
-
-	![Edit Basic SAML Configuration](common/edit-urls.png)
-
-4. In the **Basic SAML Configuration** section, take the following steps:
-
-    ![Signagelive Domain and URLs single sign-on information](common/sp-signonurl.png)
+4. In the **Basic SAML Configuration** section, take the following step:
 
     In the **Sign-on URL** box, enter a URL that uses the following pattern:
     `https://login.signagelive.com/sso/<ORGANIZATIONALUNITNAME>`
@@ -110,80 +84,50 @@ To configure Azure AD single sign-on with Signagelive, take the following steps:
 
 	![Copy configuration URLs](common/copy-configuration-urls.png)
 
-	a. Login URL
-
-	b. Azure AD Identifier
-
-	c. Logout URL
-
-### Configure Signagelive Single sign-on
-
-To configure single sign-on on the Signagelive side, send the downloaded **Certificate (Raw)** and copied URLs from the Azure portal to the [Signagelive support team](mailto:[email protected]). They ensure that the SAML SSO connection is set properly on both sides.
-
 ### Create an Azure AD test user 
 
-The objective of this section is to create a test user in the Azure portal called Britta Simon.
-
-1. In the Azure portal, in the left pane, select **Azure Active Directory**, select **Users**, and then select **All users**.
-
-    ![The "Users and groups" and "All users" links](common/users.png)
-
-2. Select **New user** at the top of the screen.
-
-    ![New user button](common/new-user.png)
-
-3. In the **User** dialog box, take the following steps.
-
-    ![The User dialog box](common/user-properties.png)
-
-    a. In the **Name** field, enter **BrittaSimon**.
-  
-    b. In the **User name** field, enter "[email protected]". For example, in this case, you might enter "[email protected]".
-
-    c. Select the **Show password** check box, and then note the value that's displayed in the Password box.
+In this section, you'll create a test user in the Azure portal called B.Simon.
 
-    d. Select **Create**.
+1. From the left pane in the Azure portal, select **Azure Active Directory**, select **Users**, and then select **All users**.
+1. Select **New user** at the top of the screen.
+1. In the **User** properties, follow these steps:
+   1. In the **Name** field, enter `B.Simon`.  
+   1. In the **User name** field, enter the [email protected]. For example, `[email protected]`.
+   1. Select the **Show password** check box, and then write down the value that's displayed in the **Password** box.
+   1. Click **Create**.
 
 ### Assign the Azure AD test user
 
-In this section, you enable Britta Simon to use Azure single sign-on by granting access to Signagelive.
+In this section, you'll enable B.Simon to use Azure single sign-on by granting access to Signagelive.
 
-1. In the Azure portal, select **Enterprise Applications**, select **All applications**, and then select **Signagelive**.
+1. In the Azure portal, select **Enterprise Applications**, and then select **All applications**.
+1. In the applications list, select **Signagelive**.
+1. In the app's overview page, find the **Manage** section and select **Users and groups**.
+1. Select **Add user**, then select **Users and groups** in the **Add Assignment** dialog.
+1. In the **Users and groups** dialog, select **B.Simon** from the Users list, then click the **Select** button at the bottom of the screen.
+1. If you are expecting a role to be assigned to the users, you can select it from the **Select a role** dropdown. If no role has been set up for this app, you see "Default Access" role selected.
+1. In the **Add Assignment** dialog, click the **Assign** button.
 
-	![Enterprise applications blade](common/enterprise-applications.png)
+## Configure Signagelive SSO
 
-2. In the applications list, select **Signagelive**.
-
-	![The Signagelive link in the Applications list](common/all-applications.png)
-
-3. In the menu on the left, select **Users and groups**.
-
-    ![The "Users and groups" link](common/users-groups-blade.png)
-
-4. Select the **Add user** button. Then, in the **Add Assignment** dialog box, select **Users and groups**.
-
-    ![The Add Assignment pane](common/add-assign-user.png)
-
-5. In the **Users and groups** dialog box, in the **Users** list, select **Britta Simon**. Then click the **Select** button at the bottom of the screen.
-
-6. If you are expecting a role value in the SAML assertion, then, in the **Select Role** dialog box, select the appropriate role for the user from the list. Next, click the **Select** button at the bottom of the screen.
-
-7. In the **Add Assignment** dialog box, select the **Assign** button.
+To configure single sign-on on the Signagelive side, send the downloaded **Certificate (Raw)** and copied URLs from the Azure portal to the [Signagelive support team](mailto:[email protected]). They ensure that the SAML SSO connection is set properly on both sides.
 
-### Create a Signagelive test user
+### Create Signagelive test user
 
 In this section, you create a user called Britta Simon in Signagelive. Work with the [Signagelive support team](mailto:[email protected]) to add the users in the Signagelive platform. You must create and activate users before you use single sign-on.
 
-### Test single sign-on 
+Signagelive also supports automatic user provisioning, you can find more details [here](./signagelive-provisioning-tutorial.md) on how to configure automatic user provisioning.
+
+## Test SSO
 
-In this section, you test your Azure AD single sign-on configuration by using the MyApps portal.
+In this section, you test your Azure AD single sign-on configuration with following options. 
 
-When you select the **Signagelive** tile in the MyApps portal, you should be automatically signed in. For more information about the MyApps portal, see [What is the MyApps portal?](../user-help/my-apps-portal-end-user-access.md).
+* Click on **Test this application** in Azure portal. This will redirect to Signagelive Sign-on URL where you can initiate the login flow. 
 
-## Additional resources
+* Go to Signagelive Sign-on URL directly and initiate the login flow from there.
 
-- [List of tutorials on how to integrate SaaS Apps with Azure Active Directory](./tutorial-list.md)
+* You can use Microsoft My Apps. When you click the Signagelive tile in the My Apps, this will redirect to Signagelive Sign-on URL. For more information about the My Apps, see [Introduction to the My Apps](../user-help/my-apps-portal-end-user-access.md).
 
-- [What is application access and single sign-on with Azure Active Directory?](../manage-apps/what-is-single-sign-on.md)
+## Next steps
 
-- [What is Conditional Access in Azure Active Directory?](../conditional-access/overview.md)
+Once you configure Signagelive you can enforce session control, which protects exfiltration and infiltration of your organization’s sensitive data in real time. Session control extends from Conditional Access. [Learn how to enforce session control with Microsoft Cloud App Security](/cloud-app-security/proxy-deployment-aad).