Skip to content

Commit 43c8def

Browse files
v-viindev-viinde
committed
Product Backlog Item 837750: SaaS App Tutorial: IQNavigator VMS update
1 parent 34eef9e commit 43c8def

File tree

1 file changed

+71
-104
lines changed

1 file changed

+71
-104
lines changed

‎articles/active-directory/saas-apps/iqnavigatorvms-tutorial.md

Lines changed: 71 additions & 104 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
---
2-
title: 'Tutorial: Azure Active Directory integration with IQNavigator VMS | Microsoft Docs'
2+
title: 'Tutorial: Azure Active Directory single sign-on (SSO) integration with IQNavigator VMS | Microsoft Docs'
33
description: Learn how to configure single sign-on between Azure Active Directory and IQNavigator VMS.
44
services: active-directory
55
documentationCenter: na
@@ -14,92 +14,77 @@ ms.workload: identity
1414
ms.tgt_pltfrm: na
1515
ms.devlang: na
1616
ms.topic: tutorial
17-
ms.date: 03/19/2019
17+
ms.date: 10/23/2019
1818
ms.author: jeedes
1919

20+
ms.collection: M365-identity-device-management
2021
---
21-
# Tutorial: Azure Active Directory integration with IQNavigator VMS
2222

23-
In this tutorial, you learn how to integrate IQNavigator VMS with Azure Active Directory (Azure AD).
24-
Integrating IQNavigator VMS with Azure AD provides you with the following benefits:
23+
# Tutorial: Azure Active Directory single sign-on (SSO) integration with IQNavigator VMS
2524

26-
* You can control in Azure AD who has access to IQNavigator VMS.
27-
* You can enable your users to be automatically signed-in to IQNavigator VMS (Single Sign-On) with their Azure AD accounts.
28-
* You can manage your accounts in one central location - the Azure portal.
25+
In this tutorial, you'll learn how to integrate IQNavigator VMS with Azure Active Directory (Azure AD). When you integrate IQNavigator VMS with Azure AD, you can:
2926

30-
If you want to know more details about SaaS app integration with Azure AD, see [What is application access and single sign-on with Azure Active Directory](https://docs.microsoft.com/azure/active-directory/active-directory-appssoaccess-whatis).
31-
If you don't have an Azure subscription, [create a free account](https://azure.microsoft.com/free/) before you begin.
27+
* Control in Azure AD who has access to IQNavigator VMS.
28+
* Enable your users to be automatically signed-in to IQNavigator VMS with their Azure AD accounts.
29+
* Manage your accounts in one central location - the Azure portal.
30+
31+
To learn more about SaaS app integration with Azure AD, see [What is application access and single sign-on with Azure Active Directory](https://docs.microsoft.com/azure/active-directory/active-directory-appssoaccess-whatis).
3232

3333
## Prerequisites
3434

35-
To configure Azure AD integration with IQNavigator VMS, you need the following items:
35+
To get started, you need the following items:
3636

37-
* An Azure AD subscription. If you don't have an Azure AD environment, you can get one-month trial [here](https://azure.microsoft.com/pricing/free-trial/)
38-
* IQNavigator VMS single sign-on enabled subscription
37+
* An Azure AD subscription. If you don't have a subscription, you can get a [free account](https://azure.microsoft.com/free/).
38+
* IQNavigator VMS single sign-on (SSO) enabled subscription.
3939

4040
## Scenario description
4141

42-
In this tutorial, you configure and test Azure AD single sign-on in a test environment.
43-
44-
* IQNavigator VMS supports **IDP** initiated SSO
45-
46-
## Adding IQNavigator VMS from the gallery
47-
48-
To configure the integration of IQNavigator VMS into Azure AD, you need to add IQNavigator VMS from the gallery to your list of managed SaaS apps.
49-
50-
**To add IQNavigator VMS from the gallery, perform the following steps:**
51-
52-
1. In the **[Azure portal](https://portal.azure.com)**, on the left navigation panel, click **Azure Active Directory** icon.
42+
In this tutorial, you configure and test Azure AD SSO in a test environment.
5343

54-
![The Azure Active Directory button](common/select-azuread.png)
5544

56-
2. Navigate to **Enterprise Applications** and then select the **All Applications** option.
57-
58-
![The Enterprise applications blade](common/enterprise-applications.png)
59-
60-
3. To add new application, click **New application** button on the top of dialog.
61-
62-
![The New application button](common/add-new-app.png)
63-
64-
4. In the search box, type **IQNavigator VMS**, select **IQNavigator VMS** from result panel then click **Add** button to add the application.
45+
* IQNavigator VMS supports **IDP** initiated SSO
6546

66-
![IQNavigator VMS in the results list](common/search-new-app.png)
47+
> [!NOTE]
48+
> Identifier of this application is a fixed string value so only one instance can be configured in one tenant.
6749
68-
## Configure and test Azure AD single sign-on
6950

70-
In this section, you configure and test Azure AD single sign-on with IQNavigator VMS based on a test user called **Britta Simon**.
71-
For single sign-on to work, a link relationship between an Azure AD user and the related user in IQNavigator VMS needs to be established.
7251

73-
To configure and test Azure AD single sign-on with IQNavigator VMS, you need to complete the following building blocks:
52+
## Adding IQNavigator VMS from the gallery
7453

75-
1. **[Configure Azure AD Single Sign-On](#configure-azure-ad-single-sign-on)** - to enable your users to use this feature.
76-
2. **[Configure IQNavigator VMS Single Sign-On](#configure-iqnavigator-vms-single-sign-on)** - to configure the Single Sign-On settings on application side.
77-
3. **[Create an Azure AD test user](#create-an-azure-ad-test-user)** - to test Azure AD single sign-on with Britta Simon.
78-
4. **[Assign the Azure AD test user](#assign-the-azure-ad-test-user)** - to enable Britta Simon to use Azure AD single sign-on.
79-
5. **[Create IQNavigator VMS test user](#create-iqnavigator-vms-test-user)** - to have a counterpart of Britta Simon in IQNavigator VMS that is linked to the Azure AD representation of user.
80-
6. **[Test single sign-on](#test-single-sign-on)** - to verify whether the configuration works.
54+
To configure the integration of IQNavigator VMS into Azure AD, you need to add IQNavigator VMS from the gallery to your list of managed SaaS apps.
8155

82-
### Configure Azure AD single sign-on
56+
1. Sign in to the [Azure portal](https://portal.azure.com) using either a work or school account, or a personal Microsoft account.
57+
1. On the left navigation pane, select the **Azure Active Directory** service.
58+
1. Navigate to **Enterprise Applications** and then select **All Applications**.
59+
1. To add new application, select **New application**.
60+
1. In the **Add from the gallery** section, type **IQNavigator VMS** in the search box.
61+
1. Select **IQNavigator VMS** from results panel and then add the app. Wait a few seconds while the app is added to your tenant.
8362

84-
In this section, you enable Azure AD single sign-on in the Azure portal.
8563

86-
To configure Azure AD single sign-on with IQNavigator VMS, perform the following steps:
64+
## Configure and test Azure AD single sign-on for IQNavigator VMS
8765

88-
1. In the [Azure portal](https://portal.azure.com/), on the **IQNavigator VMS** application integration page, select **Single sign-on**.
66+
Configure and test Azure AD SSO with IQNavigator VMS using a test user called **B.Simon**. For SSO to work, you need to establish a link relationship between an Azure AD user and the related user in IQNavigator VMS.
8967

90-
![Configure single sign-on link](common/select-sso.png)
68+
To configure and test Azure AD SSO with IQNavigator VMS, complete the following building blocks:
9169

92-
2. On the **Select a Single sign-on method** dialog, select **SAML/WS-Fed** mode to enable single sign-on.
70+
1. **[Configure Azure AD SSO](#configure-azure-ad-sso)** - to enable your users to use this feature.
71+
1. **[Create an Azure AD test user](#create-an-azure-ad-test-user)** - to test Azure AD single sign-on with B.Simon.
72+
1. **[Assign the Azure AD test user](#assign-the-azure-ad-test-user)** - to enable B.Simon to use Azure AD single sign-on.
73+
1. **[Configure IQNavigator VMS SSO](#configure-iqnavigator-vms-sso)** - to configure the single sign-on settings on application side.
74+
1. **[Create IQNavigator VMS test user](#create-iqnavigator-vms-test-user)** - to have a counterpart of B.Simon in IQNavigator VMS that is linked to the Azure AD representation of user.
75+
1. **[Test SSO](#test-sso)** - to verify whether the configuration works.
9376

94-
![Single sign-on select mode](common/select-saml-option.png)
77+
## Configure Azure AD SSO
9578

96-
3. On the **Set up Single Sign-On with SAML** page, click **Edit** icon to open **Basic SAML Configuration** dialog.
79+
Follow these steps to enable Azure AD SSO in the Azure portal.
9780

98-
![Edit Basic SAML Configuration](common/edit-urls.png)
81+
1. In the [Azure portal](https://portal.azure.com/), on the **IQNavigator VMS** application integration page, find the **Manage** section and select **single sign-on**.
82+
1. On the **Select a single sign-on method** page, select **SAML**.
83+
1. On the **Set up single sign-on with SAML** page, click the edit/pen icon for **Basic SAML Configuration** to edit the settings.
9984

100-
4. On the **Basic SAML Configuration** section, perform the following steps:
85+
![Edit Basic SAML Configuration](common/edit-urls.png)
10186

102-
![IQNavigator VMS Domain and URLs single sign-on information](common/idp-relay.png)
87+
1. On the **Basic SAML Configuration** section, enter the values for the following fields:
10388

10489
a. In the **Identifier** text box, type a URL:
10590
`iqn.com`
@@ -115,83 +100,65 @@ To configure Azure AD single sign-on with IQNavigator VMS, perform the following
115100
> [!NOTE]
116101
> These values are not real. Update these values with the actual Reply URL and Relay State. Contact [IQNavigator VMS Client support team](https://www.beeline.com/support-iqn/) to get these values. You can also refer to the patterns shown in the **Basic SAML Configuration** section in the Azure portal.
117102

118-
5. IQNavigator application expect the unique user identifier value in the Name Identifier claim. Customer can map the correct value for the Name Identifier claim. In this case we have mapped the user.UserPrincipalName for the demo purpose. But according to your organization settings you should map the correct value for it.
103+
1. IQNavigator application expect the Unique User Identifier value in the Name Identifier claim. Customer can map the correct value for the Name Identifier claim. In this case we have mapped the user.UserPrincipalName for the demo purpose. But according to your organization settings you should map the correct value for it.
119104

120105
![image](common/edit-attribute.png)
121106

122-
6. On the **Set up Single Sign-On with SAML** page, In the **SAML Signing Certificate** section, click copy button to copy **App Federation Metadata Url** and save it on your computer.
107+
1. On the **Set up single sign-on with SAML** page, In the **SAML Signing Certificate** section, click copy button to copy **App Federation Metadata Url** and save it on your computer.
123108

124109
![The Certificate download link](common/copy-metadataurl.png)
125110

126-
### Configure IQNavigator VMS Single Sign-On
127-
128-
To configure single sign-on on **IQNavigator VMS** side, you need to send the **App Federation Metadata Url** to [IQNavigator VMS support team](https://www.beeline.com/support-iqn/). They set this setting to have the SAML SSO connection set properly on both sides.
129-
130111
### Create an Azure AD test user
131112

132-
The objective of this section is to create a test user in the Azure portal called Britta Simon.
133-
134-
1. In the Azure portal, in the left pane, select **Azure Active Directory**, select **Users**, and then select **All users**.
135-
136-
![The "Users and groups" and "All users" links](common/users.png)
137-
138-
2. Select **New user** at the top of the screen.
139-
140-
![New user Button](common/new-user.png)
141-
142-
3. In the User properties, perform the following steps.
143-
144-
![The User dialog box](common/user-properties.png)
145-
146-
a. In the **Name** field enter **BrittaSimon**.
147-
148-
b. In the **User name** field type **[email protected]**
149-
For example, [email protected]
113+
In this section, you'll create a test user in the Azure portal called B.Simon.
150114

151-
c. Select **Show password** check box, and then write down the value that's displayed in the Password box.
152-
153-
d. Click **Create**.
115+
1. From the left pane in the Azure portal, select **Azure Active Directory**, select **Users**, and then select **All users**.
116+
1. Select **New user** at the top of the screen.
117+
1. In the **User** properties, follow these steps:
118+
1. In the **Name** field, enter `B.Simon`.
119+
1. In the **User name** field, enter the [email protected]. For example, `[email protected]`.
120+
1. Select the **Show password** check box, and then write down the value that's displayed in the **Password** box.
121+
1. Click **Create**.
154122

155123
### Assign the Azure AD test user
156124

157-
In this section, you enable Britta Simon to use Azure single sign-on by granting access to IQNavigator VMS.
158-
159-
1. In the Azure portal, select **Enterprise Applications**, select **All applications**, then select **IQNavigator VMS**.
160-
161-
![Enterprise applications blade](common/enterprise-applications.png)
162-
163-
2. In the applications list, select **IQNavigator VMS**.
125+
In this section, you'll enable B.Simon to use Azure single sign-on by granting access to IQNavigator VMS.
164126

165-
![The IQNavigator VMS link in the Applications list](common/all-applications.png)
127+
1. In the Azure portal, select **Enterprise Applications**, and then select **All applications**.
128+
1. In the applications list, select **IQNavigator VMS**.
129+
1. In the app's overview page, find the **Manage** section and select **Users and groups**.
166130

167-
3. In the menu on the left, select **Users and groups**.
131+
![The "Users and groups" link](common/users-groups-blade.png)
168132

169-
![The "Users and groups" link](common/users-groups-blade.png)
133+
1. Select **Add user**, then select **Users and groups** in the **Add Assignment** dialog.
170134

171-
4. Click the **Add user** button, then select **Users and groups** in the **Add Assignment** dialog.
135+
![The Add User link](common/add-assign-user.png)
172136

173-
![The Add Assignment pane](common/add-assign-user.png)
137+
1. In the **Users and groups** dialog, select **B.Simon** from the Users list, then click the **Select** button at the bottom of the screen.
138+
1. If you're expecting any role value in the SAML assertion, in the **Select Role** dialog, select the appropriate role for the user from the list and then click the **Select** button at the bottom of the screen.
139+
1. In the **Add Assignment** dialog, click the **Assign** button.
174140

175-
5. In the **Users and groups** dialog select **Britta Simon** in the Users list, then click the **Select** button at the bottom of the screen.
141+
## Configure IQNavigator VMS SSO
176142

177-
6. If you are expecting any role value in the SAML assertion then in the **Select Role** dialog select the appropriate role for the user from the list, then click the **Select** button at the bottom of the screen.
178-
179-
7. In the **Add Assignment** dialog click the **Assign** button.
143+
To configure single sign-on on **IQNavigator VMS** side, you need to send the **App Federation Metadata Url** to [IQNavigator VMS support team](https://www.beeline.com/support-iqn/). They set this setting to have the SAML SSO connection set properly on both sides.
180144

181145
### Create IQNavigator VMS test user
182146

183147
In this section, you create a user called Britta Simon in IQNavigator VMS. Work with [IQNavigator VMS support team](https://www.beeline.com/support-iqn/) to add the users in the IQNavigator VMS platform. Users must be created and activated before you use single sign-on.
184148

185-
### Test single sign-on
149+
## Test SSO
186150

187151
In this section, you test your Azure AD single sign-on configuration using the Access Panel.
188152

189153
When you click the IQNavigator VMS tile in the Access Panel, you should be automatically signed in to the IQNavigator VMS for which you set up SSO. For more information about the Access Panel, see [Introduction to the Access Panel](https://docs.microsoft.com/azure/active-directory/active-directory-saas-access-panel-introduction).
190154

191-
## Additional Resources
155+
## Additional resources
156+
157+
- [ List of Tutorials on How to Integrate SaaS Apps with Azure Active Directory ](https://docs.microsoft.com/azure/active-directory/active-directory-saas-tutorial-list)
158+
159+
- [What is application access and single sign-on with Azure Active Directory? ](https://docs.microsoft.com/azure/active-directory/active-directory-appssoaccess-whatis)
192160

193-
- [List of Tutorials on How to Integrate SaaS Apps with Azure Active Directory](https://docs.microsoft.com/azure/active-directory/active-directory-saas-tutorial-list)
161+
- [What is conditional access in Azure Active Directory?](https://docs.microsoft.com/azure/active-directory/conditional-access/overview)
194162

195-
- [What is application access and single sign-on with Azure Active Directory?](https://docs.microsoft.com/azure/active-directory/active-directory-appssoaccess-whatis)
163+
- [Try IQNavigator VMS with Azure AD](https://aad.portal.azure.com/)
196164

197-
- [What is Conditional Access in Azure Active Directory?](https://docs.microsoft.com/azure/active-directory/conditional-access/overview)

0 commit comments

Comments
 (0)