You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory/saas-apps/foodee-provisioning-tutorial.md
+69-63Lines changed: 69 additions & 63 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,6 +1,6 @@
1
1
---
2
-
title: 'Tutorial: Configure Foodee for automatic user provisioning with Azure Active Directory | Microsoft Docs'
3
-
description: Learn how to configure Azure Active Directory to automatically provision and de-provision user accounts to Foodee.
2
+
title: 'Tutorial: Configure Foodee for automatic user provisioning by using Azure Active Directory | Microsoft Docs'
3
+
description: Learn how to configure Azure Active Directory to automatically provision and deprovision user accounts to Foodee.
4
4
services: active-directory
5
5
documentationcenter: ''
6
6
author: zchia
@@ -20,147 +20,153 @@ ms.author: Zhchia
20
20
21
21
# Tutorial: Configure Foodee for automatic user provisioning
22
22
23
-
The objective of this tutorial is to demonstrate the steps to be performed in Foodee and Azure Active Directory (Azure AD) to configure Azure AD to automatically provision and de-provision users and/or groups to Foodee.
23
+
This article shows you how to configure Azure Active Directory (Azure AD) in Foodee and Azure AD to automatically provision or deprovision users or groups to Foodee.
24
24
25
25
> [!NOTE]
26
-
> This tutorial describes a connector built on top of the Azure AD User Provisioning Service. For important details on what this service does, how it works, and frequently asked questions, see [Automate user provisioning and deprovisioning to SaaS applications with Azure Active Directory](../manage-apps/user-provisioning.md).
26
+
> The article describes a connector that's built on top of the Azure AD User Provisioning service. To learn what this service does and how it works, and to get answers to frequently asked questions, see [Automate user provisioning and deprovisioning to SaaS applications with Azure Active Directory](../manage-apps/user-provisioning.md).
27
27
>
28
-
> This connector is currently in Public Preview. For more information on the general Microsoft Azure terms of use for Preview features, see[Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/).
28
+
> This connector is currently in preview. For more information about the Azure terms-of-use feature for preview features, go to[Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/).
29
29
30
30
## Prerequisites
31
31
32
-
The scenario outlined in this tutorial assumes that you already have the following prerequisites:
32
+
This tutorial assumes that you've met the following prerequisites:
33
33
34
-
* An Azure AD tenant.
34
+
* An Azure AD tenant
35
35
*[A Foodee tenant](https://www.food.ee/about/)
36
-
* A user account in Foodee with Admin permissions.
36
+
* A user account in Foodee with Admin permissions
37
37
38
-
## Assigning users to Foodee
38
+
## Assign users to Foodee
39
39
40
-
Azure Active Directory uses a concept called *assignments* to determine which users should receive access to selected apps. In the context of automatic user provisioning, only the users and/or groups that have been assigned to an application in Azure AD are synchronized.
40
+
Azure AD uses a concept called *assignments* to determine which users should receive access to selected apps. In the context of automatic user provisioning, only the users or groups that have been assigned to an application in Azure AD are synchronized.
41
41
42
-
Before configuring and enabling automatic user provisioning, you should decide which users and/or groups in Azure AD need access to Foodee. Once decided, you can assign these users and/or groups to Foodee by following the instructions here:
43
-
*[Assign a user or group to an enterprise app](../manage-apps/assign-user-or-group-access-portal.md)
42
+
Before you configure and enable automatic user provisioning, you should decide which users or groups in Azure AD need access to Foodee. After you've made this determination, you can assign these users or groups to Foodee by following the instructions in [Assign a user or group to an enterprise app](../manage-apps/assign-user-or-group-access-portal.md).
44
43
45
44
## Important tips for assigning users to Foodee
46
45
47
-
* It is recommended that a single Azure AD user is assigned to Foodee to test the automatic user provisioning configuration. Additional users and/or groups may be assigned later.
46
+
When you're assigning users, keep the following tips in mind:
48
47
49
-
*When assigning a user to Foodee, you must select any valid application-specific role (if available) in the assignment dialog. Users with the **Default Access** role are excluded from provisioning.
48
+
*We recommend that you assign only a single Azure AD user to Foodee to test the configuration of automatic user provisioning. You can assign additional users or groups later.
50
49
51
-
## Setup Foodee for provisioning
50
+
* When you're assigning a user to Foodee, select any valid application-specific role, if it's available, in the **Assignment** pane. Users who have the *Default Access* role are excluded from provisioning.
52
51
53
-
Before configuring Foodee for automatic user provisioning with Azure AD, you will need to enable SCIM provisioning on Foodee.
52
+
## Set up Foodee for provisioning
54
53
55
-
1. Log in into [Foodee](https://www.food.ee/login/). Click on your **Tenant ID**
54
+
Before you configure Foodee for automatic user provisioning by using Azure AD, you need to enable System for Cross-domain Identity Management (SCIM) provisioning in Foodee.
55
+
56
+
1. Sign in to [Foodee](https://www.food.ee/login/), and then select your tenant ID.
3. Copy the **API Token**. These values will be entered in the **Secret Token**field in the Provisioning tab of your Foodee application in the Azure portal.
64
+
1. Copy the value in the **API Token** box for later use. You'll enter it in the **Secret Token**box in the **Provisioning** tab of your Foodee application in the Azure portal.
To configure Foodee for automatic user provisioning with Azure AD, you need to add Foodee from the Azure AD application gallery to your list of managed SaaS applications.
70
+
To configure Foodee for automatic user provisioning by using Azure AD, you need to add Foodee from the Azure AD application gallery to your list of managed SaaS applications.
71
71
72
-
**To add Foodee from the Azure AD application gallery, perform the following steps:**
72
+
To add Foodee from the Azure AD application gallery, do the following:
73
73
74
-
1. In the **[Azure portal](https://portal.azure.com)**, in the left navigation panel, select **Azure Active Directory**.
74
+
1. In the [Azure portal](https://portal.azure.com), in the left pane, select **Azure Active Directory**.
75
75
76
-
76
+
77
77
78
-
2. Go to **Enterprise applications**, and then select**All applications**.
3. To add a new application, select the **New application** button at the top of the pane.
82
+
1. To add a new application, select **New application** at the top of the pane.
83
83
84
84
85
85
86
-
4. In the search box, enter **Foodee**, select **Foodee** in the results panel, and then click the **Add** button to add the application.
86
+
1. In the search box, enter **Foodee**, select **Foodee** in the results pane, and then select **Add** to add the application.
87
87
88
-
88
+
89
89
90
-
## Configuring automatic user provisioning to Foodee
90
+
## Configure automatic user provisioning to Foodee
91
91
92
-
This section guides you through the steps to configure the Azure AD provisioning service to create, update, and disable users and/or groups in Foodee based on user and/or group assignments in Azure AD.
92
+
In this section, you configure the Azure AD provisioning service to create, update, and disable users or groups in Foodee based on user or group assignments in Azure AD.
93
93
94
94
> [!TIP]
95
-
> You may also choose to enable SAML-based single sign-on for Foodee, following the instructions provided in the [Foodee Single sign-on tutorial](Foodee-tutorial.md). Single sign-on can be configured independently of automatic user provisioning, though these two features complement each other.
95
+
> You can also enable SAML-based single sign-on for Foodee by following the instructions in the [Foodee single sign-on tutorial](Foodee-tutorial.md). You can configure single sign-on independent of automatic user provisioning, though these two features complement each other.
96
96
97
-
### To configure automatic user provisioning for Foodee in Azure AD:
97
+
Configure automatic user provisioning for Foodee in Azure AD by doing the following:
98
98
99
-
1.Sign in to the [Azure portal](https://portal.azure.com). Select**Enterprise Applications**, then select**All applications**.
99
+
1.In the [Azure portal](https://portal.azure.com), select**Enterprise Applications** >**All applications**.
5. Under the Admin Credentials section, input the ` https://concierge.food.ee/scim/v2` and **API Token** values retrieved earlier in **Tenant URL** and **Secret Token** respectively. Click **Test Connection** to ensure Azure AD can connect to Foodee. If the connection fails, ensure your Foodee account has Admin permissions and try again.
a. In the **Tenant URL** box, enter the **https://concierge.food.ee/scim/v2** value that you retrieved earlier.
118
118
119
-
6. In the **Notification Email** field, enter the email address of a person or group who should receive the provisioning error notifications and check the checkbox - **Send an email notification when a failure occurs**.
119
+
b. In the **Secret Token** box, enter the **API Token** value that you retrieved earlier.
120
+
121
+
c. To ensure that Azure AD can connect to Foodee, select **Test Connection**. If the connection fails, ensure that your Foodee account has administrator permissions, and then try again.
122
124
123
-
7. Click **Save**.
125
+
1. In the **Notification Email** box, enter the email address of a person or group who should receive the provisioning error notifications, and then select the **Send an email notification when a failure occurs** check box.
124
126
125
-
8. Under the **Mappings** section, select **Synchronize Azure Active Directory Users to Foodee**.
127
+
126
128
127
-
129
+
1. Select **Save**.
128
130
129
-
9. Review the user attributes that are synchronized from Azure AD to Foodee in the **Attribute Mapping** section. The attributes selected as **Matching** properties are used to match the user accounts in Foodee for update operations. Select the **Save** button to commit any changes.
131
+
1. Under **Mappings**, select **Synchronize Azure Active Directory Users to Foodee**.
130
132
131
-
133
+
132
134
133
-
10. Under the **Mappings** section, select **Synchronize Azure Active Directory Groups to **Foodee**
135
+
1. Under **Attribute Mappings**, review the user attributes that are synchronized from Azure AD to Foodee. The attributes that are selected as **Matching** properties are used to match the *user accounts* in Foodee for update operations.
134
136
135
-
137
+
136
138
137
-
11. Review the user attributes that are synchronized from Azure AD to Foodee in the **Attribute Mapping** section. The attributes selected as **Matching** properties are used to match the group accounts in Foodee for update operations. Select the **Save** button to commit any changes.
139
+
1. To commit your changes, select **Save**.
140
+
1. Under **Mappings**, select **Synchronize Azure Active Directory Groups to Foodee**.
138
141
139
-
142
+
140
143
141
-
12. To configure scoping filters, refer to the following instructions provided in the [Scoping filter tutorial](../manage-apps/define-conditional-rules-for-provisioning-user-accounts.md).
144
+
1. Under **Attribute Mappings**, review the user attributes that are synchronized from Azure AD to Foodee. The attributes that are selected as **Matching** properties are used to match the *group accounts* in Foodee for update operations.
142
145
143
-
13. To enable the Azure AD provisioning service for Foodee, change the **Provisioning Status** to **On** in the **Settings** section.
146
+
144
147
145
-
148
+
1. To commit your changes, select **Save**.
149
+
1. Configure the scoping filters. To learn how, refer to the instructions in the [Scoping filter tutorial](../manage-apps/define-conditional-rules-for-provisioning-user-accounts.md).
146
150
147
-
14. Define the users and/or groups that you would like to provision to Foodee by choosing the desired values in **Scope**in the **Settings**section.
151
+
1. To enable the Azure AD provisioning service for Foodee, in the **Settings**section, change the **Provisioning Status**to **On**.
This operation starts the initial synchronization of all users and/or groups defined in **Scope** in the **Settings** section. The initial sync takes longer to perform than subsequent syncs. For more information on how long it will take for users and/or groups to provision, see [How long will it take to provision users](../manage-apps/application-provisioning-when-will-provisioning-finish-specific-user.md#how-long-will-it-take-to-provision-users).
159
+
1. When you're ready to provision, select **Save**.
156
160
157
-
You can use the **Current Status** section to monitor progress and follow links to your provisioning activity report, which describes all actions performed by the Azure AD provisioning service on Foodee. For more information, see [Check the status of user provisioning](../manage-apps/application-provisioning-when-will-provisioning-finish-specific-user.md). To read the Azure AD provisioning logs, see [Reporting on automatic user account provisioning](../manage-apps/check-status-user-account-provisioning.md).
161
+
158
162
163
+
The preceding operation starts the initial synchronization of the users or groups that you've defined in the **Scope** drop-down list. The initial sync takes longer to perform than subsequent syncs. For more information, see [How long will it take to provision users?](../manage-apps/application-provisioning-when-will-provisioning-finish-specific-user.md#how-long-will-it-take-to-provision-users).
159
164
165
+
You can use the **Current Status** section to monitor progress and follow links to your provisioning activity report. The report describes all actions that are performed by the Azure AD provisioning service on Foodee. For more information, see [Check the status of user provisioning](../manage-apps/application-provisioning-when-will-provisioning-finish-specific-user.md). To read the Azure AD provisioning logs, see [Reporting on automatic user account provisioning](../manage-apps/check-status-user-account-provisioning.md).
160
166
161
167
## Additional resources
162
168
163
-
*[Managing user account provisioning for Enterprise Apps](../manage-apps/configure-automatic-user-provisioning-portal.md)
169
+
*[Manage user account provisioning for enterprise apps](../manage-apps/configure-automatic-user-provisioning-portal.md)
164
170
*[What is application access and single sign-on with Azure Active Directory?](../manage-apps/what-is-single-sign-on.md)
0 commit comments