Skip to content

Commit 20160fa

Browse files
megvanhuygenmegvanhuygen
authored
Merge pull request #101371 from v-hagamp/featuredapp8
Product Backlog Item 897190: SaaS App Tutorial: Description Update fo…
2 parents 713a1bc + 7641966 commit 20160fa

File tree

2 files changed

+83
-116
lines changed

2 files changed

+83
-116
lines changed

‎articles/active-directory/saas-apps/salesforce-sandbox-tutorial.md

Lines changed: 76 additions & 114 deletions
Original file line numberDiff line numberDiff line change
@@ -12,34 +12,29 @@ ms.service: active-directory
1212
ms.subservice: saas-app-tutorial
1313
ms.workload: identity
1414
ms.tgt_pltfrm: na
15-
ms.devlang: na
1615
ms.topic: tutorial
17-
ms.date: 04/17/2019
16+
ms.date: 01/16/2020
1817
ms.author: jeedes
1918

19+
ms.collection: M365-identity-device-management
2020
---
21-
# Tutorial: Azure Active Directory integration with Salesforce Sandbox
2221

23-
In this tutorial, you learn how to integrate Salesforce Sandbox with Azure Active Directory (Azure AD).
22+
# Tutorial: Azure Active Directory single sign-on (SSO) integration with Salesforce Sandbox
2423

25-
Sandboxes give you the ability to create multiple copies of your organization in separate environments for a variety of purposes, such as development, testing, and training, without compromising the data and applications in your Salesforce production organization.
26-
For more details, see [Sandbox Overview](https://help.salesforce.com/articleView?id=create_test_instance.htm&language=en_us&type=5).
24+
In this tutorial, you'll learn how to integrate Salesforce Sandbox with Azure Active Directory (Azure AD). When you integrate Salesforce Sandbox with Azure AD, you can:
2725

28-
Integrating Salesforce Sandbox with Azure AD provides you with the following benefits:
26+
* Control in Azure AD who has access to Salesforce Sandbox.
27+
* Enable your users to be automatically signed-in to Salesforce Sandbox with their Azure AD accounts.
28+
* Manage your accounts in one central location - the Azure portal.
2929

30-
* You can control in Azure AD who has access to Salesforce Sandbox.
31-
* You can enable your users to be automatically signed-in to Salesforce Sandbox (Single Sign-On) with their Azure AD accounts.
32-
* You can manage your accounts in one central location - the Azure portal.
33-
34-
If you want to know more details about SaaS app integration with Azure AD, see [What is application access and single sign-on with Azure Active Directory](https://docs.microsoft.com/azure/active-directory/active-directory-appssoaccess-whatis).
35-
If you don't have an Azure subscription, [create a free account](https://azure.microsoft.com/free/) before you begin.
30+
To learn more about SaaS app integration with Azure AD, see [What is application access and single sign-on with Azure Active Directory](https://docs.microsoft.com/azure/active-directory/active-directory-appssoaccess-whatis).
3631

3732
## Prerequisites
3833

39-
To configure Azure AD integration with Salesforce Sandbox, you need the following items:
34+
To get started, you need the following items:
4035

41-
* An Azure AD subscription. If you don't have an Azure AD environment, you can get a [free account](https://azure.microsoft.com/free/)
42-
* Salesforce Sandbox single sign-on enabled subscription
36+
* An Azure AD subscription. If you don't have a subscription, you can get a [free account](https://azure.microsoft.com/free/).
37+
* Salesforce Sandbox single sign-on (SSO) enabled subscription.
4338

4439
## Scenario description
4540

@@ -48,61 +43,42 @@ In this tutorial, you configure and test Azure AD single sign-on in a test envir
4843
* Salesforce Sandbox supports **SP and IDP** initiated SSO
4944
* Salesforce Sandbox supports **Just In Time** user provisioning
5045
* Salesforce Sandbox supports [**Automated** user provisioning](salesforce-sandbox-provisioning-tutorial.md)
46+
* Once you configure the Salesforce Sandbox you can enforce session controls, which protect exfiltration and infiltration of your organization’s sensitive data in real-time. Session controls extend from Conditional Access. [Learn how to enforce session control with Microsoft Cloud App Security](https://docs.microsoft.com/cloud-app-security/proxy-deployment-aad)
5147

5248
## Adding Salesforce Sandbox from the gallery
5349

5450
To configure the integration of Salesforce Sandbox into Azure AD, you need to add Salesforce Sandbox from the gallery to your list of managed SaaS apps.
5551

56-
**To add Salesforce Sandbox from the gallery, perform the following steps:**
57-
58-
1. In the **[Azure portal](https://portal.azure.com)**, on the left navigation panel, click **Azure Active Directory** icon.
59-
60-
![The Azure Active Directory button](common/select-azuread.png)
61-
62-
2. Navigate to **Enterprise Applications** and then select the **All Applications** option.
63-
64-
![The Enterprise applications blade](common/enterprise-applications.png)
65-
66-
3. To add new application, click **New application** button on the top of dialog.
67-
68-
![The New application button](common/add-new-app.png)
69-
70-
4. In the search box, type **Salesforce Sandbox**, select **Salesforce Sandbox** from result panel then click **Add** button to add the application.
71-
72-
![Salesforce Sandbox in the results list](common/search-new-app.png)
73-
74-
## Configure and test Azure AD single sign-on
75-
76-
In this section, you configure and test Azure AD single sign-on with Salesforce Sandbox based on a test user called **Britta Simon**.
77-
78-
For single sign-on to work, Azure AD needs to know what the counterpart user in Salesforce Sandbox is to a user in Azure AD. In other words, a link relationship between an Azure AD user and the related user in Salesforce Sandbox needs to be established.
79-
80-
To configure and test Azure AD single sign-on with Salesforce Sandbox, you need to complete the following building blocks:
81-
82-
1. **[Configure Azure AD Single Sign-On](#configure-azure-ad-single-sign-on)** - to enable your users to use this feature.
83-
2. **[Configure Salesforce Sandbox Single Sign-On](#configure-salesforce-sandbox-single-sign-on)** - to configure the Single Sign-On settings on application side.
84-
3. **[Create an Azure AD test user](#create-an-azure-ad-test-user)** - to test Azure AD single sign-on with Britta Simon.
85-
4. **[Assign the Azure AD test user](#assign-the-azure-ad-test-user)** - to enable Britta Simon to use Azure AD single sign-on.
86-
5. **[Create Salesforce Sandbox test user](#create-salesforce-sandbox-test-user)** - to have a counterpart of Britta Simon in Salesforce Sandbox that is linked to the Azure AD representation of user.
87-
6. **[Test single sign-on](#test-single-sign-on)** - to verify whether the configuration works.
52+
1. Sign in to the [Azure portal](https://portal.azure.com) using either a work or school account, or a personal Microsoft account.
53+
1. On the left navigation pane, select the **Azure Active Directory** service.
54+
1. Navigate to **Enterprise Applications** and then select **All Applications**.
55+
1. To add new application, select **New application**.
56+
1. In the **Add from the gallery** section, type **Salesforce Sandbox** in the search box.
57+
1. Select **Salesforce Sandbox** from results panel and then add the app. Wait a few seconds while the app is added to your tenant.
8858

89-
### Configure Azure AD single sign-on
9059

91-
In this section, you enable Azure AD single sign-on in the Azure portal.
60+
## Configure and test Azure AD single sign-on for Salesforce Sandbox
9261

93-
To configure Azure AD single sign-on with Salesforce Sandbox, perform the following steps:
62+
Configure and test Azure AD SSO with Salesforce Sandbox using a test user called **B.Simon**. For SSO to work, you need to establish a link relationship between an Azure AD user and the related user in Salesforce Sandbox.
9463

95-
1. In the [Azure portal](https://portal.azure.com/), on the **Salesforce Sandbox** application integration page, select **Single sign-on**.
64+
To configure and test Azure AD SSO with Salesforce Sandbox, complete the following building blocks:
9665

97-
![Configure single sign-on link](common/select-sso.png)
66+
1. **[Configure Azure AD SSO](#configure-azure-ad-sso)** - to enable your users to use this feature.
67+
* **[Create an Azure AD test user](#create-an-azure-ad-test-user)** - to test Azure AD single sign-on with B.Simon.
68+
* **[Assign the Azure AD test user](#assign-the-azure-ad-test-user)** - to enable B.Simon to use Azure AD single sign-on.
69+
1. **[Configure Salesforce Sandbox SSO](#configure-salesforce-sandbox-sso)** - to configure the single sign-on settings on application side.
70+
* **[Create Salesforce Sandbox test user](#create-salesforce-sandbox-test-user)** - to have a counterpart of B.Simon in Salesforce Sandbox that is linked to the Azure AD representation of user.
71+
1. **[Test SSO](#test-sso)** - to verify whether the configuration works.
9872

99-
2. On the **Select a Single sign-on method** dialog, select **SAML/WS-Fed** mode to enable single sign-on.
73+
## Configure Azure AD SSO
10074

101-
![Single sign-on select mode](common/select-saml-option.png)
75+
Follow these steps to enable Azure AD SSO in the Azure portal.
10276

103-
3. On the **Set up Single Sign-On with SAML** page, click **Edit** icon to open **Basic SAML Configuration** dialog.
77+
1. In the [Azure portal](https://portal.azure.com/), on the **Salesforce Sandbox** application integration page, find the **Manage** section and select **single sign-on**.
78+
1. On the **Select a single sign-on method** page, select **SAML**.
79+
1. On the **Set up single sign-on with SAML** page, click the edit/pen icon for **Basic SAML Configuration** to edit the settings.
10480

105-
![Edit Basic SAML Configuration](common/edit-urls.png)
81+
![Edit Basic SAML Configuration](common/edit-urls.png)
10682

10783
4. On the **Basic SAML Configuration** section, if you have **Service Provider metadata file** and wish to configure in **IDP** initiated mode perform the following steps:
10884

@@ -138,7 +114,37 @@ To configure Azure AD single sign-on with Salesforce Sandbox, perform the follow
138114

139115
c. Logout URL
140116

141-
### Configure Salesforce Sandbox Single Sign-On
117+
### Create an Azure AD test user
118+
119+
In this section, you'll create a test user in the Azure portal called B.Simon.
120+
121+
1. From the left pane in the Azure portal, select **Azure Active Directory**, select **Users**, and then select **All users**.
122+
1. Select **New user** at the top of the screen.
123+
1. In the **User** properties, follow these steps:
124+
1. In the **Name** field, enter `B.Simon`.
125+
1. In the **User name** field, enter the [email protected]. For example, `[email protected]`.
126+
1. Select the **Show password** check box, and then write down the value that's displayed in the **Password** box.
127+
1. Click **Create**.
128+
129+
### Assign the Azure AD test user
130+
131+
In this section, you'll enable B.Simon to use Azure single sign-on by granting access to Salesforce Sandbox.
132+
133+
1. In the Azure portal, select **Enterprise Applications**, and then select **All applications**.
134+
1. In the applications list, select **Salesforce Sandbox**.
135+
1. In the app's overview page, find the **Manage** section and select **Users and groups**.
136+
137+
![The "Users and groups" link](common/users-groups-blade.png)
138+
139+
1. Select **Add user**, then select **Users and groups** in the **Add Assignment** dialog.
140+
141+
![The Add User link](common/add-assign-user.png)
142+
143+
1. In the **Users and groups** dialog, select **B.Simon** from the Users list, then click the **Select** button at the bottom of the screen.
144+
1. If you're expecting any role value in the SAML assertion, in the **Select Role** dialog, select the appropriate role for the user from the list and then click the **Select** button at the bottom of the screen.
145+
1. In the **Add Assignment** dialog, click the **Assign** button.
146+
147+
## Configure Salesforce Sandbox SSO
142148

143149
1. Open a new tab in your browser and sign in to your Salesforce Sandbox administrator account.
144150

@@ -240,72 +246,28 @@ To configure Azure AD single sign-on with Salesforce Sandbox, perform the follow
240246

241247
![Configure Single Sign-On](./media/salesforce-sandbox-tutorial/configure2.png)
242248

243-
### Create an Azure AD test user
244-
245-
The objective of this section is to create a test user in the Azure portal called Britta Simon.
246-
247-
1. In the Azure portal, in the left pane, select **Azure Active Directory**, select **Users**, and then select **All users**.
248-
249-
![The "Users and groups" and "All users" links](common/users.png)
250-
251-
2. Select **New user** at the top of the screen.
252-
253-
![New user Button](common/new-user.png)
254-
255-
3. In the User properties, perform the following steps.
256-
257-
![The User dialog box](common/user-properties.png)
258-
259-
a. In the **Name** field enter **BrittaSimon**.
260-
261-
b. In the **User name** field type `[email protected]`. For example, [email protected].
262-
263-
c. Select **Show password** check box, and then write down the value that's displayed in the Password box.
264-
265-
d. Click **Create**.
266-
267-
### Assign the Azure AD test user
268-
269-
In this section, you enable Britta Simon to use Azure single sign-on by granting access to Salesforce Sandbox.
270-
271-
1. In the Azure portal, select **Enterprise Applications**, select **All applications**, then select **Salesforce Sandbox**.
272-
273-
![Enterprise applications blade](common/enterprise-applications.png)
274-
275-
2. In the applications list, select **Salesforce Sandbox**.
276-
277-
![The Salesforce Sandbox link in the Applications list](common/all-applications.png)
278-
279-
3. In the menu on the left, select **Users and groups**.
280-
281-
![The "Users and groups" link](common/users-groups-blade.png)
282-
283-
4. Click the **Add user** button, then select **Users and groups** in the **Add Assignment** dialog.
284-
285-
![The Add Assignment pane](common/add-assign-user.png)
286-
287-
5. In the **Users and groups** dialog select **Britta Simon** in the Users list, then click the **Select** button at the bottom of the screen.
288-
289-
6. If you are expecting any role value in the SAML assertion then in the **Select Role** dialog select the appropriate role for the user from the list, then click the **Select** button at the bottom of the screen.
290-
291-
7. In the **Add Assignment** dialog click the **Assign** button.
292-
293249
### Create Salesforce Sandbox test user
294250

295251
In this section, a user called Britta Simon is created in Salesforce Sandbox. Salesforce Sandbox supports just-in-time provisioning, which is enabled by default. There is no action item for you in this section. If a user doesn't already exist in Salesforce Sandbox, a new one is created when you attempt to access Salesforce Sandbox. Salesforce Sandbox also supports automatic user provisioning, you can find more details [here](salesforce-sandbox-provisioning-tutorial.md) on how to configure automatic user provisioning.
296252

297-
### Test single sign-on
253+
## Test SSO
298254

299255
In this section, you test your Azure AD single sign-on configuration using the Access Panel.
300256

301257
When you click the Salesforce Sandbox tile in the Access Panel, you should be automatically signed in to the Salesforce Sandbox for which you set up SSO. For more information about the Access Panel, see [Introduction to the Access Panel](https://docs.microsoft.com/azure/active-directory/active-directory-saas-access-panel-introduction).
302258

303-
## Additional Resources
259+
## Additional resources
260+
261+
- [ List of Tutorials on How to Integrate SaaS Apps with Azure Active Directory ](https://docs.microsoft.com/azure/active-directory/active-directory-saas-tutorial-list)
262+
263+
- [What is application access and single sign-on with Azure Active Directory? ](https://docs.microsoft.com/azure/active-directory/active-directory-appssoaccess-whatis)
264+
265+
- [What is conditional access in Azure Active Directory?](https://docs.microsoft.com/azure/active-directory/conditional-access/overview)
304266

305-
- [List of Tutorials on How to Integrate SaaS Apps with Azure Active Directory](https://docs.microsoft.com/azure/active-directory/active-directory-saas-tutorial-list)
267+
- [Try Salesforce Sandbox with Azure AD](https://aad.portal.azure.com/)
306268

307-
- [What is application access and single sign-on with Azure Active Directory?](https://docs.microsoft.com/azure/active-directory/active-directory-appssoaccess-whatis)
269+
- [What is session control in Microsoft Cloud App Security?](https://docs.microsoft.com/cloud-app-security/protect-salesforce)
308270

309-
- [What is Conditional Access in Azure Active Directory?](https://docs.microsoft.com/azure/active-directory/conditional-access/overview)
271+
- [Configure User Provisioning](salesforce-sandbox-provisioning-tutorial.md)
310272

311-
* [Configure User Provisioning](salesforce-sandbox-provisioning-tutorial.md)
273+
- [How to protect Salesforce Sandbox with advanced visibility and controls](https://docs.microsoft.com/cloud-app-security/proxy-intro-aad)

‎articles/active-directory/saas-apps/salesforce-tutorial.md

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ ms.subservice: saas-app-tutorial
1313
ms.workload: identity
1414
ms.tgt_pltfrm: na
1515
ms.topic: tutorial
16-
ms.date: 12/23/2019
16+
ms.date: 01/16/2020
1717
ms.author: jeedes
1818

1919
ms.collection: M365-identity-device-management
@@ -47,6 +47,7 @@ In this tutorial, you configure and test Azure AD SSO in a test environment.
4747
* Salesforce supports **Just In Time** user provisioning
4848

4949
* Salesforce Mobile application can now be configured with Azure AD for enabling SSO. In this tutorial, you configure and test Azure AD SSO in a test environment.
50+
* Once you configure the Salesforce you can enforce session controls, which protect exfiltration and infiltration of your organization’s sensitive data in real-time. Session controls extend from Conditional Access. [Learn how to enforce session control with Microsoft Cloud App Security](https://docs.microsoft.com/cloud-app-security/proxy-deployment-aad)
5051

5152
## Adding Salesforce from the gallery
5253

@@ -238,4 +239,8 @@ When you click the Salesforce tile in the Access Panel, you should be automatica
238239

239240
- [Configure User Provisioning](salesforce-provisioning-tutorial.md)
240241

241-
- [Try Salesforce with Azure AD](https://aad.portal.azure.com)
242+
- [Try Salesforce with Azure AD](https://aad.portal.azure.com)
243+
244+
- [What is session control in Microsoft Cloud App Security?](https://docs.microsoft.com/cloud-app-security/protect-salesforce)
245+
246+
- [How to protect Salesforce with advanced visibility and controls](https://docs.microsoft.com/cloud-app-security/proxy-intro-aad)

0 commit comments

Comments
 (0)