Skip to content

Commit 5ffb5f2

Browse files
authored
Consistency updates
1 parent a78a76e commit 5ffb5f2

File tree

1 file changed

+3
-4
lines changed

1 file changed

+3
-4
lines changed

articles/active-directory/manage-apps/f5-big-ip-kerberos-easy-button.md

Lines changed: 3 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@ To learn about all of the benefits, see the article on [F5 BIG-IP and Azure AD i
2929

3030
## Scenario description
3131

32-
For this scenario, we have an application using **Kerberos authentication**, also known as **Integrated Windows Authentication (IWA)**, to gate access to protected content.
32+
This scenario looks at the classic legacy application using **Kerberos authentication**, also known as **Integrated Windows Authentication (IWA)**, to gate access to protected content.
3333

3434
Being legacy, the application lacks modern protocols to support a direct integration with Azure AD. The application can be modernized, but it is costly, requires careful planning, and introduces risk of potential downtime. Instead, an F5 BIG-IP Application Delivery Controller (ADC) is used to bridge the gap between the legacy application and the modern ID control plane, through protocol transitioning.
3535

@@ -98,7 +98,7 @@ There are many methods to configure BIG-IP for this scenario, including two temp
9898
9999
## Register Easy Button
100100

101-
Before a client or service can access Microsoft Graph, it must be [trusted by the Microsoft identity platform.](/azure/active-directory/develop/quickstart-register-app)
101+
Before a client or service can access Microsoft Graph, it must be trusted by the [Microsoft identity platform.](/azure/active-directory/develop/quickstart-register-app)
102102

103103
The Easy Button client must also be registered in Azure AD, before it is allowed to establish a trust between each SAML SP instance of a BIG-IP published application, and Azure AD as the SAML IdP.
104104

@@ -116,7 +116,6 @@ The Easy Button client must also be registered in Azure AD, before it is allowed
116116

117117
7. Navigate to **API permissions** and authorize the following Microsoft Graph permissions:
118118

119-
* Application.Read.All
120119
* Application.ReadWrite.All
121120
* Application.ReadWrite.OwnedBy
122121
* Directory.Read.All
@@ -135,7 +134,7 @@ The Easy Button client must also be registered in Azure AD, before it is allowed
135134

136135
## Configure Easy Button
137136

138-
Initiate the **Easy Button** configuration to set up a SAML Service Provider (SP) and Azure AD as an Identity Provider (IdP) for your application.
137+
Initiate the **Guided Configuration** to launch the **Easy Button** Template.
139138

140139
1. Navigate to **Access > Guided Configuration > Microsoft Integration** and select **Azure AD Application**.
141140

0 commit comments

Comments
 (0)