Skip to content

Commit 5eb9624

Browse files
roygararoygara
committed
Merge branch 'master' of https://github.com/MicrosoftDocs/azure-docs-pr into upFilesPlan
2 parents c38c031 + 5939fb6 commit 5eb9624

File tree

1 file changed

+86
-127
lines changed

1 file changed

+86
-127
lines changed

‎articles/active-directory/saas-apps/amplitude-tutorial.md

Lines changed: 86 additions & 127 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
---
2-
title: 'Tutorial: Azure Active Directory integration with Amplitude | Microsoft Docs'
2+
title: 'Tutorial: Azure Active Directory single sign-on (SSO) integration with Amplitude | Microsoft Docs'
33
description: Learn how to configure single sign-on between Azure Active Directory and Amplitude.
44
services: active-directory
55
documentationCenter: na
@@ -9,37 +9,37 @@ ms.reviewer: barbkess
99

1010
ms.assetid: 496c9ffa-c833-41fa-8d17-2dc3044954d1
1111
ms.service: active-directory
12+
ms.subservice: saas-app-tutorial
1213
ms.workload: identity
1314
ms.tgt_pltfrm: na
1415
ms.devlang: na
1516
ms.topic: tutorial
16-
ms.date: 01/17/2019
17+
ms.date: 10/14/2019
1718
ms.author: jeedes
1819

1920
ms.collection: M365-identity-device-management
2021
---
21-
# Tutorial: Azure Active Directory integration with Amplitude
2222

23-
In this tutorial, you learn how to integrate Amplitude with Azure Active Directory (Azure AD).
24-
Integrating Amplitude with Azure AD provides you with the following benefits:
23+
# Tutorial: Azure Active Directory single sign-on (SSO) integration with Amplitude
2524

26-
* You can control in Azure AD who has access to Amplitude.
27-
* You can enable your users to be automatically signed-in to Amplitude (Single Sign-On) with their Azure AD accounts.
28-
* You can manage your accounts in one central location - the Azure portal.
25+
In this tutorial, you'll learn how to integrate Amplitude with Azure Active Directory (Azure AD). When you integrate Amplitude with Azure AD, you can:
2926

30-
If you want to know more details about SaaS app integration with Azure AD, see [What is application access and single sign-on with Azure Active Directory](https://docs.microsoft.com/azure/active-directory/active-directory-appssoaccess-whatis).
31-
If you don't have an Azure subscription, [create a free account](https://azure.microsoft.com/free/) before you begin.
27+
* Control in Azure AD who has access to Amplitude.
28+
* Enable your users to be automatically signed-in to Amplitude with their Azure AD accounts.
29+
* Manage your accounts in one central location - the Azure portal.
30+
31+
To learn more about SaaS app integration with Azure AD, see [What is application access and single sign-on with Azure Active Directory](https://docs.microsoft.com/azure/active-directory/active-directory-appssoaccess-whatis).
3232

3333
## Prerequisites
3434

35-
To configure Azure AD integration with Amplitude, you need the following items:
35+
To get started, you need the following items:
3636

37-
* An Azure AD subscription. If you don't have an Azure AD environment, you can get one-month trial [here](https://azure.microsoft.com/pricing/free-trial/)
38-
* Amplitude single sign-on enabled subscription
37+
* An Azure AD subscription. If you don't have a subscription, you can get a [free account](https://azure.microsoft.com/free/).
38+
* Amplitude single sign-on (SSO) enabled subscription.
3939

4040
## Scenario description
4141

42-
In this tutorial, you configure and test Azure AD single sign-on in a test environment.
42+
In this tutorial, you configure and test Azure AD SSO in a test environment.
4343

4444
* Amplitude supports **SP and IDP** initiated SSO
4545
* Amplitude supports **Just In Time** user provisioning
@@ -48,180 +48,139 @@ In this tutorial, you configure and test Azure AD single sign-on in a test envir
4848

4949
To configure the integration of Amplitude into Azure AD, you need to add Amplitude from the gallery to your list of managed SaaS apps.
5050

51-
**To add Amplitude from the gallery, perform the following steps:**
52-
53-
1. In the **[Azure portal](https://portal.azure.com)**, on the left navigation panel, click **Azure Active Directory** icon.
54-
55-
![The Azure Active Directory button](common/select-azuread.png)
56-
57-
2. Navigate to **Enterprise Applications** and then select the **All Applications** option.
58-
59-
![The Enterprise applications blade](common/enterprise-applications.png)
60-
61-
3. To add new application, click **New application** button on the top of dialog.
62-
63-
![The New application button](common/add-new-app.png)
64-
65-
4. In the search box, type **Amplitude**, select **Amplitude** from result panel then click **Add** button to add the application.
66-
67-
![Amplitude in the results list](common/search-new-app.png)
68-
69-
## Configure and test Azure AD single sign-on
70-
71-
In this section, you configure and test Azure AD single sign-on with Amplitude based on a test user called **Britta Simon**.
72-
For single sign-on to work, a link relationship between an Azure AD user and the related user in Amplitude needs to be established.
73-
74-
To configure and test Azure AD single sign-on with Amplitude, you need to complete the following building blocks:
51+
1. Sign in to the [Azure portal](https://portal.azure.com) using either a work or school account, or a personal Microsoft account.
52+
1. On the left navigation pane, select the **Azure Active Directory** service.
53+
1. Navigate to **Enterprise Applications** and then select **All Applications**.
54+
1. To add new application, select **New application**.
55+
1. In the **Add from the gallery** section, type **Amplitude** in the search box.
56+
1. Select **Amplitude** from results panel and then add the app. Wait a few seconds while the app is added to your tenant.
7557

76-
1. **[Configure Azure AD Single Sign-On](#configure-azure-ad-single-sign-on)** - to enable your users to use this feature.
77-
2. **[Configure Amplitude Single Sign-On](#configure-amplitude-single-sign-on)** - to configure the Single Sign-On settings on application side.
78-
3. **[Create an Azure AD test user](#create-an-azure-ad-test-user)** - to test Azure AD single sign-on with Britta Simon.
79-
4. **[Assign the Azure AD test user](#assign-the-azure-ad-test-user)** - to enable Britta Simon to use Azure AD single sign-on.
80-
5. **[Create Amplitude test user](#create-amplitude-test-user)** - to have a counterpart of Britta Simon in Amplitude that is linked to the Azure AD representation of user.
81-
6. **[Test single sign-on](#test-single-sign-on)** - to verify whether the configuration works.
58+
## Configure and test Azure AD single sign-on for Amplitude
8259

83-
### Configure Azure AD single sign-on
60+
Configure and test Azure AD SSO with Amplitude using a test user called **B.Simon**. For SSO to work, you need to establish a link relationship between an Azure AD user and the related user in Amplitude.
8461

85-
In this section, you enable Azure AD single sign-on in the Azure portal.
62+
To configure and test Azure AD SSO with Amplitude, complete the following building blocks:
8663

87-
To configure Azure AD single sign-on with Amplitude, perform the following steps:
64+
1. **[Configure Azure AD SSO](#configure-azure-ad-sso)** - to enable your users to use this feature.
65+
* **[Create an Azure AD test user](#create-an-azure-ad-test-user)** - to test Azure AD single sign-on with B.Simon.
66+
* **[Assign the Azure AD test user](#assign-the-azure-ad-test-user)** - to enable B.Simon to use Azure AD single sign-on.
67+
1. **[Configure Amplitude SSO](#configure-amplitude-sso)** - to configure the single sign-on settings on application side.
68+
* **[Create Amplitude test user](#create-amplitude-test-user)** - to have a counterpart of B.Simon in Amplitude that is linked to the Azure AD representation of user.
69+
1. **[Test SSO](#test-sso)** - to verify whether the configuration works.
8870

89-
1. In the [Azure portal](https://portal.azure.com/), on the **Amplitude** application integration page, select **Single sign-on**.
71+
## Configure Azure AD SSO
9072

91-
![Configure single sign-on link](common/select-sso.png)
73+
Follow these steps to enable Azure AD SSO in the Azure portal.
9274

93-
2. On the **Select a Single sign-on method** dialog, select **SAML/WS-Fed** mode to enable single sign-on.
75+
1. In the [Azure portal](https://portal.azure.com/), on the **Amplitude** application integration page, find the **Manage** section and select **single sign-on**.
76+
1. On the **Select a single sign-on method** page, select **SAML**.
77+
1. On the **Set up single sign-on with SAML** page, click the edit/pen icon for **Basic SAML Configuration** to edit the settings.
9478

95-
![Single sign-on select mode](common/select-saml-option.png)
79+
![Edit Basic SAML Configuration](common/edit-urls.png)
9680

97-
3. On the **Set up Single Sign-On with SAML** page, click **Edit** icon to open **Basic SAML Configuration** dialog.
81+
1. On the **Basic SAML Configuration** section, if you wish to configure the application in **IDP** initiated mode, enter the values for the following fields:
9882

99-
![Edit Basic SAML Configuration](common/edit-urls.png)
100-
101-
4. On the **Basic SAML Configuration** section, If you wish to configure the application in **IDP** initiated mode, perform the following steps:
102-
103-
![Amplitude Domain and URLs single sign-on information](common/idp-intiated.png)
104-
105-
a. In the **Identifier** text box, type the URL:
83+
a. In the **Identifier** text box, type a URL:
10684
`https://amplitude.com/saml/sso/metadata`
10785

10886
b. In the **Reply URL** text box, type a URL using the following pattern:
10987
`https://analytics.amplitude.com/saml/sso/<uniqueid>`
11088

11189
> [!NOTE]
112-
> The Reply URL value is not real. You will get the Reply URL value later in this tutorial.
90+
> The Reply URL value is not real. You will get the Reply URL value later in this tutorial.
11391

114-
5. Click **Set additional URLs** and perform the following step if you wish to configure the application in **SP** initiated mode:
92+
1. Click **Set additional URLs** and perform the following step if you wish to configure the application in **SP** initiated mode:
11593

116-
![Amplitude Domain and URLs single sign-on information](common/metadata-upload-additional-signon.png)
117-
118-
In the **Sign-on URL** text box, type the URL:
94+
In the **Sign-on URL** text box, type a URL:
11995
`https://analytics.amplitude.com/sso`
12096

121-
6. On the **Set up Single Sign-On with SAML** page, in the **SAML Signing Certificate** section, click **Download** to download the **Federation Metadata XML** from the given options as per your requirement and save it on your computer.
97+
1. On the **Set up single sign-on with SAML** page, in the **SAML Signing Certificate** section, find **Federation Metadata XML** and select **Download** to download the certificate and save it on your computer.
12298

12399
![The Certificate download link](common/metadataxml.png)
124100

125-
7. On the **Set up Amplitude** section, copy the appropriate URL(s) as per your requirement.
101+
1. On the **Set up Amplitude** section, copy the appropriate URL(s) based on your requirement.
126102

127103
![Copy configuration URLs](common/copy-configuration-urls.png)
128104

129-
a. Login URL
130-
131-
b. Azure Ad Identifier
132-
133-
c. Logout URL
134-
135-
### Configure Amplitude Single Sign-On
136-
137-
1. Sign-on to your Amplitude company site as administrator.
138-
139-
2. Click on the **Plan Admin** from the left navigation bar.
140-
141-
![Configure Single Sign-On](./media/amplitude-tutorial/configure1.png)
142-
143-
3. Select **Microsoft Azure Active Directory Metadata** from the **SSO Integration**.
144-
145-
![Configure Single Sign-On](./media/amplitude-tutorial/configure2.png)
146-
147-
4. On the **Set Up Single Sign-On** section, perform the following steps:
148-
149-
![Configure Single Sign-On](./media/amplitude-tutorial/configure3.png)
150-
151-
a. Open the downloaded **Metadata Xml** from Azure portal in notepad, paste the content into the **Microsoft Azure Active Directory Metadata** textbox.
152-
153-
b. Copy the **Reply URL (ACS)** value and paste it into the **Reply URL** textbox of **Basic SAML Configuration** in the Azure portal.
154-
155-
c. Click **Save**
156-
157105
### Create an Azure AD test user
158106

159-
The objective of this section is to create a test user in the Azure portal called Britta Simon.
107+
In this section, you'll create a test user in the Azure portal called B.Simon.
160108

161-
1. In the Azure portal, in the left pane, select **Azure Active Directory**, select **Users**, and then select **All users**.
109+
1. From the left pane in the Azure portal, select **Azure Active Directory**, select **Users**, and then select **All users**.
110+
1. Select **New user** at the top of the screen.
111+
1. In the **User** properties, follow these steps:
112+
1. In the **Name** field, enter `B.Simon`.
113+
1. In the **User name** field, enter the [email protected]. For example, `[email protected]`.
114+
1. Select the **Show password** check box, and then write down the value that's displayed in the **Password** box.
115+
1. Click **Create**.
162116

163-
![The "Users and groups" and "All users" links](common/users.png)
117+
### Assign the Azure AD test user
164118

165-
2. Select **New user** at the top of the screen.
119+
In this section, you'll enable B.Simon to use Azure single sign-on by granting access to Amplitude.
166120

167-
![New user Button](common/new-user.png)
121+
1. In the Azure portal, select **Enterprise Applications**, and then select **All applications**.
122+
1. In the applications list, select **Amplitude**.
123+
1. In the app's overview page, find the **Manage** section and select **Users and groups**.
168124

169-
3. In the User properties, perform the following steps.
125+
![The "Users and groups" link](common/users-groups-blade.png)
170126

171-
![The User dialog box](common/user-properties.png)
127+
1. Select **Add user**, then select **Users and groups** in the **Add Assignment** dialog.
172128

173-
a. In the **Name** field enter **BrittaSimon**.
174-
175-
b. In the **User name** field type **brittasimon\@yourcompanydomain.extension**
176-
For example, [email protected]
129+
![The Add User link](common/add-assign-user.png)
177130

178-
c. Select **Show password** check box, and then write down the value that's displayed in the Password box.
131+
1. In the **Users and groups** dialog, select **B.Simon** from the Users list, then click the **Select** button at the bottom of the screen.
132+
1. If you're expecting any role value in the SAML assertion, in the **Select Role** dialog, select the appropriate role for the user from the list and then click the **Select** button at the bottom of the screen.
133+
1. In the **Add Assignment** dialog, click the **Assign** button.
179134

180-
d. Click **Create**.
135+
## Configure Amplitude SSO
181136

182-
### Assign the Azure AD test user
137+
1. To automate the configuration within Amplitude, you need to install **My Apps Secure Sign-in browser extension** by clicking **Install the extension**.
183138

184-
In this section, you enable Britta Simon to use Azure single sign-on by granting access to Amplitude.
139+
![My apps extension](common/install-myappssecure-extension.png)
185140

186-
1. In the Azure portal, select **Enterprise Applications**, select **All applications**, then select **Amplitude**.
141+
1. After adding extension to the browser, click on **Set up Amplitude** will direct you to the Amplitude application. From there, provide the admin credentials to sign into Amplitude. The browser extension will automatically configure the application for you and automate steps 3-6.
187142

188-
![Enterprise applications blade](common/enterprise-applications.png)
143+
![Setup configuration](common/setup-sso.png)
189144

190-
2. In the applications list, select **Amplitude**.
145+
1. If you want to setup Amplitude manually, open a new web browser window and sign into your Amplitude company site as an administrator and perform the following steps:
191146

192-
![The Amplitude link in the Applications list](common/all-applications.png)
147+
1. Click on the **Plan Admin** from the left navigation bar.
193148

194-
3. In the menu on the left, select **Users and groups**.
149+
![Configure Single Sign-On](./media/amplitude-tutorial/configure1.png)
195150

196-
![The "Users and groups" link](common/users-groups-blade.png)
151+
1. Select **Microsoft Azure Active Directory Metadata** from the **SSO Integration**.
197152

198-
4. Click the **Add user** button, then select **Users and groups** in the **Add Assignment** dialog.
153+
![Configure Single Sign-On](./media/amplitude-tutorial/configure2.png)
199154

200-
![The Add Assignment pane](common/add-assign-user.png)
155+
1. On the **Set Up Single Sign-On** section, perform the following steps:
201156

202-
5. In the **Users and groups** dialog select **Britta Simon** in the Users list, then click the **Select** button at the bottom of the screen.
157+
![Configure Single Sign-On](./media/amplitude-tutorial/configure3.png)
203158

204-
6. If you are expecting any role value in the SAML assertion then in the **Select Role** dialog select the appropriate role for the user from the list, then click the **Select** button at the bottom of the screen.
159+
a. Open the downloaded **Metadata Xml** from Azure portal in notepad, paste the content into the **Microsoft Azure Active Directory Metadata** textbox.
205160

206-
7. In the **Add Assignment** dialog click the **Assign** button.
161+
b. Copy the **Reply URL (ACS)** value and paste it into the **Reply URL** textbox of **Basic SAML Configuration** in the Azure portal.
162+
163+
c. Click **Save**
207164

208165
### Create Amplitude test user
209166

210-
In this section, a user called Britta Simon is created in Amplitude. Amplitude supports just-in-time user provisioning, which is enabled by default. There is no action item for you in this section. If a user doesn't already exist in Amplitude, a new one is created after authentication.
167+
In this section, a user called B.Simon is created in Amplitude. Amplitude supports just-in-time user provisioning, which is enabled by default. There is no action item for you in this section. If a user doesn't already exist in Amplitude, a new one is created after authentication.
211168

212169
> [!Note]
213-
> If you need to create a user manually, contact [Amplitude support team](https://amplitude.zendesk.com).
170+
> If you need to create a user manually, contact [Amplitude support team](https://amplitude.zendesk.com).
214171
215-
### Test single sign-on
172+
## Test SSO
216173

217174
In this section, you test your Azure AD single sign-on configuration using the Access Panel.
218175

219176
When you click the Amplitude tile in the Access Panel, you should be automatically signed in to the Amplitude for which you set up SSO. For more information about the Access Panel, see [Introduction to the Access Panel](https://docs.microsoft.com/azure/active-directory/active-directory-saas-access-panel-introduction).
220177

221-
## Additional Resources
178+
## Additional resources
179+
180+
- [ List of Tutorials on How to Integrate SaaS Apps with Azure Active Directory ](https://docs.microsoft.com/azure/active-directory/active-directory-saas-tutorial-list)
222181

223-
- [List of Tutorials on How to Integrate SaaS Apps with Azure Active Directory](https://docs.microsoft.com/azure/active-directory/active-directory-saas-tutorial-list)
182+
- [What is application access and single sign-on with Azure Active Directory? ](https://docs.microsoft.com/azure/active-directory/active-directory-appssoaccess-whatis)
224183

225-
- [What is application access and single sign-on with Azure Active Directory?](https://docs.microsoft.com/azure/active-directory/active-directory-appssoaccess-whatis)
184+
- [What is conditional access in Azure Active Directory?](https://docs.microsoft.com/azure/active-directory/conditional-access/overview)
226185

227-
- [What is Conditional Access in Azure Active Directory?](https://docs.microsoft.com/azure/active-directory/conditional-access/overview)
186+
- [Try Amplitude with Azure AD](https://aad.portal.azure.com/)

0 commit comments

Comments
 (0)