Skip to content

Commit 46f44a6

Browse files
authored
Merge pull request #172168 from bhavana-129/softeon-update
Product Backlog Item 1560082: SaaS App Tutorial: Softeon WMS
2 parents e9adba9 + 2b95baf commit 46f44a6

File tree

1 file changed

+72
-120
lines changed

1 file changed

+72
-120
lines changed
Lines changed: 72 additions & 120 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
---
2-
title: 'Tutorial: Azure Active Directory integration with Softeon WMS | Microsoft Docs'
2+
title: 'Tutorial: Azure AD SSO integration with Softeon WMS | Microsoft Docs'
33
description: Learn how to configure single sign-on between Azure Active Directory and Softeon WMS.
44
services: active-directory
55
author: jeevansd
@@ -9,101 +9,80 @@ ms.service: active-directory
99
ms.subservice: saas-app-tutorial
1010
ms.workload: identity
1111
ms.topic: tutorial
12-
ms.date: 03/22/2019
12+
ms.date: 09/13/2021
1313
ms.author: jeedes
1414
---
15-
# Tutorial: Azure Active Directory integration with Softeon WMS
15+
# Tutorial: Azure AD SSO integration with Softeon WMS
1616

17-
In this tutorial, you learn how to integrate Softeon WMS with Azure Active Directory (Azure AD).
18-
Integrating Softeon WMS with Azure AD provides you with the following benefits:
17+
In this tutorial, you'll learn how to integrate Softeon WMS with Azure Active Directory (Azure AD). When you integrate Softeon WMS with Azure AD, you can:
1918

20-
* You can control in Azure AD who has access to Softeon WMS.
21-
* You can enable your users to be automatically signed-in to Softeon WMS (Single Sign-On) with their Azure AD accounts.
22-
* You can manage your accounts in one central location - the Azure portal.
23-
24-
If you want to know more details about SaaS app integration with Azure AD, see [What is application access and single sign-on with Azure Active Directory](../manage-apps/what-is-single-sign-on.md).
25-
If you don't have an Azure subscription, [create a free account](https://azure.microsoft.com/free/) before you begin.
19+
* Control in Azure AD who has access to Softeon WMS.
20+
* Enable your users to be automatically signed-in to Softeon WMS with their Azure AD accounts.
21+
* Manage your accounts in one central location - the Azure portal.
2622

2723
## Prerequisites
2824

2925
To configure Azure AD integration with Softeon WMS, you need the following items:
3026

31-
* An Azure AD subscription. If you don't have an Azure AD environment, you can get a [free account](https://azure.microsoft.com/free/)
32-
* Softeon WMS single sign-on enabled subscription
27+
* An Azure AD subscription. If you don't have an Azure AD environment, you can get a [free account](https://azure.microsoft.com/free/).
28+
* Softeon WMS single sign-on enabled subscription.
3329

3430
## Scenario description
3531

3632
In this tutorial, you configure and test Azure AD single sign-on in a test environment.
3733

38-
* Softeon WMS supports **SP** initiated SSO
39-
* Softeon WMS supports **Just In Time** user provisioning
34+
* Softeon WMS supports **SP** and **IDP** initiated SSO.
35+
* Softeon WMS supports **Just In Time** user provisioning.
4036

41-
## Adding Softeon WMS from the gallery
37+
## Add Softeon WMS from the gallery
4238

4339
To configure the integration of Softeon WMS into Azure AD, you need to add Softeon WMS from the gallery to your list of managed SaaS apps.
4440

45-
**To add Softeon WMS from the gallery, perform the following steps:**
46-
47-
1. In the **[Azure portal](https://portal.azure.com)**, on the left navigation panel, click **Azure Active Directory** icon.
48-
49-
![The Azure Active Directory button](common/select-azuread.png)
50-
51-
2. Navigate to **Enterprise Applications** and then select the **All Applications** option.
52-
53-
![The Enterprise applications blade](common/enterprise-applications.png)
54-
55-
3. To add new application, click **New application** button on the top of dialog.
56-
57-
![The New application button](common/add-new-app.png)
58-
59-
4. In the search box, type **Softeon WMS**, select **Softeon WMS** from result panel then click **Add** button to add the application.
60-
61-
![Softeon WMS in the results list](common/search-new-app.png)
62-
63-
## Configure and test Azure AD single sign-on
41+
1. Sign in to the Azure portal using either a work or school account, or a personal Microsoft account.
42+
1. On the left navigation pane, select the **Azure Active Directory** service.
43+
1. Navigate to **Enterprise Applications** and then select **All Applications**.
44+
1. To add new application, select **New application**.
45+
1. In the **Add from the gallery** section, type **Softeon WMS** in the search box.
46+
1. Select **Softeon WMS** from results panel and then add the app. Wait a few seconds while the app is added to your tenant.
6447

65-
In this section, you configure and test Azure AD single sign-on with Softeon WMS based on a test user called **Britta Simon**.
66-
For single sign-on to work, a link relationship between an Azure AD user and the related user in Softeon WMS needs to be established.
48+
## Configure and test Azure AD SSO for Softeon WMS
6749

68-
To configure and test Azure AD single sign-on with Softeon WMS, you need to complete the following building blocks:
50+
Configure and test Azure AD SSO with Softeon WMS using a test user called **B.Simon**. For SSO to work, you need to establish a link relationship between an Azure AD user and the related user in Softeon WMS.
6951

70-
1. **[Configure Azure AD Single Sign-On](#configure-azure-ad-single-sign-on)** - to enable your users to use this feature.
71-
2. **[Configure Softeon WMS Single Sign-On](#configure-softeon-wms-single-sign-on)** - to configure the Single Sign-On settings on application side.
72-
3. **[Create an Azure AD test user](#create-an-azure-ad-test-user)** - to test Azure AD single sign-on with Britta Simon.
73-
4. **[Assign the Azure AD test user](#assign-the-azure-ad-test-user)** - to enable Britta Simon to use Azure AD single sign-on.
74-
5. **[Create Softeon WMS test user](#create-softeon-wms-test-user)** - to have a counterpart of Britta Simon in Softeon WMS that is linked to the Azure AD representation of user.
75-
6. **[Test single sign-on](#test-single-sign-on)** - to verify whether the configuration works.
52+
To configure and test Azure AD SSO with Softeon WMS, perform the following steps:
7653

77-
### Configure Azure AD single sign-on
54+
1. **[Configure Azure AD SSO](#configure-azure-ad-sso)** - to enable your users to use this feature.
55+
1. **[Create an Azure AD test user](#create-an-azure-ad-test-user)** - to test Azure AD single sign-on with B.Simon.
56+
1. **[Assign the Azure AD test user](#assign-the-azure-ad-test-user)** - to enable B.Simon to use Azure AD single sign-on.
57+
1. **[Configure Softeon WMS SSO](#configure-softeon-wms-sso)** - to configure the single sign-on settings on application side.
58+
1. **[Create Softeon WMS test user](#create-softeon-wms-test-user)** - to have a counterpart of B.Simon in Softeon WMS that is linked to the Azure AD representation of user.
59+
1. **[Test SSO](#test-sso)** - to verify whether the configuration works.
7860

79-
In this section, you enable Azure AD single sign-on in the Azure portal.
61+
## Configure Azure AD SSO
8062

81-
To configure Azure AD single sign-on with Softeon WMS, perform the following steps:
63+
Follow these steps to enable Azure AD SSO in the Azure portal.
8264

83-
1. In the [Azure portal](https://portal.azure.com/), on the **Softeon WMS** application integration page, select **Single sign-on**.
65+
1. In the Azure portal, on the **Softeon WMS** application integration page, find the **Manage** section and select **single sign-on**.
66+
1. On the **Select a single sign-on method** page, select **SAML**.
67+
1. On the **Set up single sign-on with SAML** page, click the pencil icon for **Basic SAML Configuration** to edit the settings.
8468

85-
![Configure single sign-on link](common/select-sso.png)
69+
![Edit Basic SAML Configuration](common/edit-urls.png)
8670

87-
2. On the **Select a Single sign-on method** dialog, select **SAML/WS-Fed** mode to enable single sign-on.
71+
4. On the **Basic SAML Configuration** section, if you wish to configure the application in **IDP** initiated mode, perform the following steps:
8872

89-
![Single sign-on select mode](common/select-saml-option.png)
90-
91-
3. On the **Set up Single Sign-On with SAML** page, click **Edit** icon to open **Basic SAML Configuration** dialog.
92-
93-
![Edit Basic SAML Configuration](common/edit-urls.png)
94-
95-
4. On the **Basic SAML Configuration** section, perform the following steps:
73+
a. In the **Identifier (Entity ID)** text box, type a URL using the following pattern:
74+
`https://<companyname>.softeon.com/sp`
9675

97-
![Softeon WMS Domain and URLs single sign-on information](common/sp-identifier.png)
76+
b. In the **Reply URL** text box, type a URL using the following pattern:
77+
`https://<SUBDOMAIN>.softeon.com/<CUSTOM_URL>`
78+
79+
5. Click **Set additional URLs** and perform the following step if you wish to configure the application in **SP** initiated mode:
9880

99-
a. In the **Sign on URL** text box, type a URL using the following pattern:
81+
In the **Sign on URL** text box, type a URL using the following pattern:
10082
`https://<companyname>.softeon.com/<instancename>`
10183

102-
b. In the **Identifier (Entity ID)** text box, type a URL using the following pattern:
103-
`https://<companyname>.softeon.com/sp`
104-
10584
> [!NOTE]
106-
> These values are not real. Update these values with the actual Sign on URL and Identifier. Contact [Softeon WMS Client support team](mailto:[email protected]) to get these values. You can also refer to the patterns shown in the **Basic SAML Configuration** section in the Azure portal.
85+
> These values are not real. Update these values with the actual Identifier, Reply URL and Sign on URL. Contact [Softeon WMS Client support team](mailto:[email protected]) to get these values. You can also refer to the patterns shown in the **Basic SAML Configuration** section in the Azure portal.
10786

10887
5. On the **Set up Single Sign-On with SAML** page, in the **SAML Signing Certificate** section, click **Download** to download the **Certificate (Base64)** from the given options as per your requirement and save it on your computer.
10988

@@ -113,81 +92,54 @@ To configure Azure AD single sign-on with Softeon WMS, perform the following ste
11392

11493
![Copy configuration URLs](common/copy-configuration-urls.png)
11594

116-
a. Login URL
117-
118-
b. Azure AD Identifier
119-
120-
c. Logout URL
121-
122-
### Configure Softeon WMS Single Sign-On
123-
124-
To configure single sign-on on **Softeon WMS** side, you need to send the downloaded **Certificate (Base64)** and appropriate copied URLs from Azure portal to [Softeon WMS support team](mailto:[email protected]). They set this setting to have the SAML SSO connection set properly on both sides.
125-
12695
### Create an Azure AD test user
12796

128-
The objective of this section is to create a test user in the Azure portal called Britta Simon.
129-
130-
1. In the Azure portal, in the left pane, select **Azure Active Directory**, select **Users**, and then select **All users**.
131-
132-
![The "Users and groups" and "All users" links](common/users.png)
133-
134-
2. Select **New user** at the top of the screen.
135-
136-
![New user Button](common/new-user.png)
137-
138-
3. In the User properties, perform the following steps.
139-
140-
![The User dialog box](common/user-properties.png)
141-
142-
a. In the **Name** field enter **BrittaSimon**.
143-
144-
b. In the **User name** field type [email protected]
145-
For example, [email protected]
146-
147-
c. Select **Show password** check box, and then write down the value that's displayed in the Password box.
97+
In this section, you'll create a test user in the Azure portal called B.Simon.
14898

149-
d. Click **Create**.
99+
1. From the left pane in the Azure portal, select **Azure Active Directory**, select **Users**, and then select **All users**.
100+
1. Select **New user** at the top of the screen.
101+
1. In the **User** properties, follow these steps:
102+
1. In the **Name** field, enter `B.Simon`.
103+
1. In the **User name** field, enter the [email protected]. For example, `[email protected]`.
104+
1. Select the **Show password** check box, and then write down the value that's displayed in the **Password** box.
105+
1. Click **Create**.
150106

151107
### Assign the Azure AD test user
152108

153-
In this section, you enable Britta Simon to use Azure single sign-on by granting access to Softeon WMS.
109+
In this section, you'll enable B.Simon to use Azure single sign-on by granting access to Softeon WMS.
154110

155-
1. In the Azure portal, select **Enterprise Applications**, select **All applications**, then select **Softeon WMS**.
111+
1. In the Azure portal, select **Enterprise Applications**, and then select **All applications**.
112+
1. In the applications list, select **Softeon WMS**.
113+
1. In the app's overview page, find the **Manage** section and select **Users and groups**.
114+
1. Select **Add user**, then select **Users and groups** in the **Add Assignment** dialog.
115+
1. In the **Users and groups** dialog, select **B.Simon** from the Users list, then click the **Select** button at the bottom of the screen.
116+
1. If you are expecting a role to be assigned to the users, you can select it from the **Select a role** dropdown. If no role has been set up for this app, you see "Default Access" role selected.
117+
1. In the **Add Assignment** dialog, click the **Assign** button.
156118

157-
![Enterprise applications blade](common/enterprise-applications.png)
119+
## Configure Softeon WMS SSO
158120

159-
2. In the applications list, select **Softeon WMS**.
160-
161-
![The Softeon WMS link in the Applications list](common/all-applications.png)
162-
163-
3. In the menu on the left, select **Users and groups**.
164-
165-
![The "Users and groups" link](common/users-groups-blade.png)
166-
167-
4. Click the **Add user** button, then select **Users and groups** in the **Add Assignment** dialog.
168-
169-
![The Add Assignment pane](common/add-assign-user.png)
121+
To configure single sign-on on **Softeon WMS** side, you need to send the downloaded **Certificate (Base64)** and appropriate copied URLs from Azure portal to [Softeon WMS support team](mailto:[email protected]). They set this setting to have the SAML SSO connection set properly on both sides.
170122

171-
5. In the **Users and groups** dialog select **Britta Simon** in the Users list, then click the **Select** button at the bottom of the screen.
123+
### Create Softeon WMS test user
172124

173-
6. If you are expecting any role value in the SAML assertion then in the **Select Role** dialog select the appropriate role for the user from the list, then click the **Select** button at the bottom of the screen.
125+
In this section, a user called Britta Simon is created in Softeon WMS. Softeon WMS supports just-in-time user provisioning, which is enabled by default. There is no action item for you in this section. If a user doesn't already exist in Softeon WMS, a new one is created after authentication.
174126

175-
7. In the **Add Assignment** dialog click the **Assign** button.
127+
## Test SSO
176128

177-
### Create Softeon WMS test user
129+
In this section, you test your Azure AD single sign-on configuration with following options.
178130

179-
In this section, a user called Britta Simon is created in Softeon WMS. Softeon WMS supports just-in-time user provisioning, which is enabled by default. There is no action item for you in this section. If a user doesn't already exist in Softeon WMS, a new one is created after authentication.
131+
#### SP initiated:
180132

181-
### Test single sign-on
133+
* Click on **Test this application** in Azure portal. This will redirect to Softeon WMS Sign on URL where you can initiate the login flow.
182134

183-
In this section, you test your Azure AD single sign-on configuration using the Access Panel.
135+
* Go to Softeon WMS Sign-on URL directly and initiate the login flow from there.
184136

185-
When you click the Softeon WMS tile in the Access Panel, you should be automatically signed in to the Softeon WMS for which you set up SSO. For more information about the Access Panel, see [Introduction to the Access Panel](https://support.microsoft.com/account-billing/sign-in-and-start-apps-from-the-my-apps-portal-2f3b1bae-0e5a-4a86-a33e-876fbd2a4510).
137+
#### IDP initiated:
186138

187-
## Additional Resources
139+
* Click on **Test this application** in Azure portal and you should be automatically signed in to the Softeon WMS for which you set up the SSO.
188140

189-
- [List of Tutorials on How to Integrate SaaS Apps with Azure Active Directory](./tutorial-list.md)
141+
You can also use Microsoft My Apps to test the application in any mode. When you click the Softeon WMS tile in the My Apps, if configured in SP mode you would be redirected to the application sign on page for initiating the login flow and if configured in IDP mode, you should be automatically signed in to the Softeon WMS for which you set up the SSO. For more information about the My Apps, see [Introduction to the My Apps](../user-help/my-apps-portal-end-user-access.md).
190142

191-
- [What is application access and single sign-on with Azure Active Directory?](../manage-apps/what-is-single-sign-on.md)
143+
## Next steps
192144

193-
- [What is Conditional Access in Azure Active Directory?](../conditional-access/overview.md)
145+
Once you configure Softeon WMS you can enforce session control, which protects exfiltration and infiltration of your organization’s sensitive data in real time. Session control extends from Conditional Access. [Learn how to enforce session control with Microsoft Cloud App Security](/cloud-app-security/proxy-deployment-aad).

0 commit comments

Comments
 (0)