Skip to content

Commit 3a7aea2

Browse files
v-ccolinv-ccolin
authored
Merge pull request #235872 from bhavana-129/securetransport
Product Backlog Item 2548139: SaaS App Tutorial: SecureTransport
2 parents 877b51b + 49accd4 commit 3a7aea2

File tree

2 files changed

+128
-0
lines changed

2 files changed

+128
-0
lines changed

‎articles/active-directory/saas-apps/securetransport-tutorial.md

Lines changed: 126 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,126 @@
1+
---
2+
title: Azure Active Directory SSO integration with SecureTransport
3+
description: Learn how to configure single sign-on between Azure Active Directory and SecureTransport.
4+
services: active-directory
5+
author: jeevansd
6+
manager: CelesteDG
7+
ms.reviewer: CelesteDG
8+
ms.service: active-directory
9+
ms.subservice: saas-app-tutorial
10+
ms.workload: identity
11+
ms.topic: how-to
12+
ms.date: 04/26/2023
13+
ms.author: jeedes
14+
15+
---
16+
17+
# Azure Active Directory SSO integration with SecureTransport
18+
19+
In this article, you learn how to integrate SecureTransport with Azure Active Directory (Azure AD). SecureTransport is a high scalable and resilient multi-protocol MFT gateway, with fault-tolerance and high availability to meet all critical file transfer needs of any small or large organization. When you integrate SecureTransport with Azure AD, you can:
20+
21+
* Control in Azure AD who has access to SecureTransport.
22+
* Enable your users to be automatically signed-in to SecureTransport with their Azure AD accounts.
23+
* Manage your accounts in one central location - the Azure portal.
24+
25+
You configure and test Azure AD single sign-on for SecureTransport in a test environment. SecureTransport supports **SP** initiated single sign-on.
26+
27+
> [!NOTE]
28+
> Identifier of this application is a fixed string value so only one instance can be configured in one tenant.
29+
30+
## Prerequisites
31+
32+
To integrate Azure Active Directory with SecureTransport, you need:
33+
34+
* An Azure AD user account. If you don't already have one, you can [Create an account for free](https://azure.microsoft.com/free/?WT.mc_id=A261C142F).
35+
* One of the following roles: Global Administrator, Cloud Application Administrator, Application Administrator, or owner of the service principal.
36+
* An Azure AD subscription. If you don't have a subscription, you can get a [free account](https://azure.microsoft.com/free/).
37+
* SecureTransport single sign-on (SSO) enabled subscription.
38+
39+
## Add application and assign a test user
40+
41+
Before you begin the process of configuring single sign-on, you need to add the SecureTransport application from the Azure AD gallery. You need a test user account to assign to the application and test the single sign-on configuration.
42+
43+
### Add SecureTransport from the Azure AD gallery
44+
45+
Add SecureTransport from the Azure AD application gallery to configure single sign-on with SecureTransport. For more information on how to add application from the gallery, see the [Quickstart: Add application from the gallery](../manage-apps/add-application-portal.md).
46+
47+
### Create and assign Azure AD test user
48+
49+
Follow the guidelines in the [create and assign a user account](../manage-apps/add-application-portal-assign-users.md) article to create a test user account in the Azure portal called B.Simon.
50+
51+
Alternatively, you can also use the [Enterprise App Configuration Wizard](https://portal.office.com/AdminPortal/home?Q=Docs#/azureadappintegration). In this wizard, you can add an application to your tenant, add users/groups to the app, and assign roles. The wizard also provides a link to the single sign-on configuration pane in the Azure portal. [Learn more about Microsoft 365 wizards.](/microsoft-365/admin/misc/azure-ad-setup-guides).
52+
53+
## Configure Azure AD SSO
54+
55+
Complete the following steps to enable Azure AD single sign-on in the Azure portal.
56+
57+
1. In the Azure portal, on the **SecureTransport** application integration page, find the **Manage** section and select **single sign-on**.
58+
1. On the **Select a single sign-on method** page, select **SAML**.
59+
1. On the **Set up single sign-on with SAML** page, select the pencil icon for **Basic SAML Configuration** to edit the settings.
60+
61+
![Screenshot shows how to edit Basic SAML Configuration.](common/edit-urls.png "Basic Configuration")
62+
63+
1. On the **Basic SAML Configuration** section, perform the following steps:
64+
65+
a. In the **Identifier** textbox, type one of the following values:
66+
67+
| User type | value |
68+
|----------|----------|
69+
| Admin | `st.sso.admin`|
70+
| End-user | `st.sso.enduser` |
71+
72+
b. In the **Reply URL** textbox, type a URL using one of the following patterns:
73+
74+
| User type | URL |
75+
|----------|----------|
76+
| Admin | `https://<SecureTransport_Address>:<PORT>/saml2/sso/post/j_security_check`|
77+
| End-user | `https://<SecureTransport_Address>:<PORT>/saml2/sso/post` |
78+
79+
c. In the **Sign on URL** textbox, type a URL using one of the following patterns:
80+
81+
| User type | URL |
82+
|----------|----------|
83+
| Admin | `https://<SecureTransport_Address>:<PORT>` |
84+
| End-user | `https://<SecureTransport_Address>:<PORT>` |
85+
86+
> [!NOTE]
87+
> These values are not real. Update these values with the actual Reply URL and Sign on URL. Contact [SecureTransport Client support team](mailto:[email protected]) to get these values. You can also refer to the patterns shown in the **Basic SAML Configuration** section in the Azure portal.
88+
89+
1. Your SecureTransport application expects the SAML assertions in a specific format, which requires you to add custom attribute mappings to your SAML token attributes configuration. The following screenshot shows an example for this. The default value of **Unique User Identifier** is **user.userprincipalname** but SecureTransport expects this to be mapped with the user's display name. For that you can use **user.displayname** attribute from the list or use the appropriate attribute value based on your organization configuration.
90+
91+
![Screenshot shows the image of token attributes configuration.](common/default-attributes.png "Image")
92+
93+
1. On the **Set-up single sign-on with SAML** page, in the **SAML Signing Certificate** section, find **Federation Metadata XML** and select **Download** to download the certificate and save it on your computer.
94+
95+
![Screenshot shows the Certificate download link.](common/metadataxml.png "Certificate")
96+
97+
1. On the **Set up SecureTransport** section, copy the appropriate URL(s) based on your requirement.
98+
99+
![Screenshot shows to copy configuration appropriate URL.](common/copy-configuration-urls.png "Metadata")
100+
101+
## Configure SecureTransport SSO
102+
103+
To configure single sign-on on **SecureTransport** side, you need to send the downloaded **Federation Metadata XML** and appropriate copied URLs from Azure portal to [SecureTransport support team](mailto:[email protected]). They set this setting to have the SAML SSO connection set properly on both sides.
104+
105+
### Create SecureTransport test user
106+
107+
In this section, you create a user called Britta Simon at SecureTransport. Work with [SecureTransport support team](mailto:[email protected]) to add the users in the SecureTransport platform. Users must be created and activated before you use single sign-on.
108+
109+
## Test SSO
110+
111+
In this section, you test your Azure AD single sign-on configuration with following options.
112+
113+
* Click on **Test this application** in Azure portal. This will redirect to SecureTransport Sign-on URL where you can initiate the login flow.
114+
115+
* Go to SecureTransport Sign-on URL directly and initiate the login flow from there.
116+
117+
* You can use Microsoft My Apps. When you click the SecureTransport tile in the My Apps, this will redirect to SecureTransport Sign-on URL. For more information about the My Apps, see [Introduction to the My Apps](../user-help/my-apps-portal-end-user-access.md).
118+
119+
## Additional resources
120+
121+
* [What is single sign-on with Azure Active Directory?](../manage-apps/what-is-single-sign-on.md)
122+
* [Plan a single sign-on deployment](../manage-apps/plan-sso-deployment.md).
123+
124+
## Next steps
125+
126+
Once you configure SecureTransport you can enforce session control, which protects exfiltration and infiltration of your organization’s sensitive data in real time. Session control extends from Conditional Access. [Learn how to enforce session control with Microsoft Cloud App Security](/cloud-app-security/proxy-deployment-aad).

‎articles/active-directory/saas-apps/toc.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2185,6 +2185,8 @@
21852185
href: seculio-tutorial.md
21862186
- name: SECURE DELIVER
21872187
href: securedeliver-tutorial.md
2188+
- name: SecureTransport
2189+
href: securetransport-tutorial.md
21882190
- name: SecureW2 JoinNow Connector
21892191
href: securejoinnow-tutorial.md
21902192
- name: SecurityStudio

0 commit comments

Comments
 (0)