Skip to content

Commit 6dff8b1

Browse files
PMEds28PMEds28
authored
Merge pull request #183493 from MicrosoftDocs/master
Merge Master to Live, 4 AM
2 parents 9f40d97 + d9ecc7a commit 6dff8b1

File tree

174 files changed

+1419
-655
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

174 files changed

+1419
-655
lines changed

‎articles/active-directory/devices/howto-vm-sign-in-azure-ad-linux.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -137,7 +137,7 @@ If you choose to install and use the CLI locally, this article requires that you
137137

138138
1. Create a resource group with [az group create](/cli/azure/group#az_group_create).
139139
1. Create a VM with [az vm create](/cli/azure/vm#az_vm_create&preserve-view=true) using a supported distribution in a supported region.
140-
1. Install the Azure AD login VM extension with [az vm extension set](/cli/azure/vm/extension?view=azure-cli-latest#az_vm_extension_set&preserve-view=true).
140+
1. Install the Azure AD login VM extension with [az vm extension set](/cli/azure/vm/extension#az_vm_extension_set).
141141

142142
The following example deploys a VM named *myVM*, using *Ubuntu 18.04 LTS*, into a resource group named *AzureADLinuxVM*, in the *southcentralus* region. It then installs the *Azure AD login VM extension* to enable Azure AD login for Linux VM. VM extensions are small applications that provide post-deployment configuration and automation tasks on Azure virtual machines.
143143

‎articles/active-directory/saas-apps/active-and-thriving-perth-airport-tutorial.md

Lines changed: 146 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,146 @@
1+
---
2+
title: 'Tutorial: Azure AD SSO integration with Active and Thriving - Perth Airport'
3+
description: Learn how to configure single sign-on between Azure Active Directory and Active and Thriving - Perth Airport.
4+
services: active-directory
5+
author: jeevansd
6+
manager: CelesteDG
7+
ms.reviewer: CelesteDG
8+
ms.service: active-directory
9+
ms.subservice: saas-app-tutorial
10+
ms.workload: identity
11+
ms.topic: tutorial
12+
ms.date: 12/20/2021
13+
ms.author: jeedes
14+
15+
---
16+
17+
# Tutorial: Azure AD SSO integration with Active and Thriving - Perth Airport
18+
19+
In this tutorial, you'll learn how to integrate Active and Thriving - Perth Airport with Azure Active Directory (Azure AD). When you integrate Active and Thriving - Perth Airport with Azure AD, you can:
20+
21+
* Control in Azure AD who has access to Active and Thriving - Perth Airport.
22+
* Enable your users to be automatically signed-in to Active and Thriving - Perth Airport with their Azure AD accounts.
23+
* Manage your accounts in one central location - the Azure portal.
24+
25+
## Prerequisites
26+
27+
To get started, you need the following items:
28+
29+
* An Azure AD subscription. If you don't have a subscription, you can get a [free account](https://azure.microsoft.com/free/).
30+
* Active and Thriving - Perth Airport single sign-on (SSO) enabled subscription.
31+
32+
## Scenario description
33+
34+
In this tutorial, you configure and test Azure AD SSO in a test environment.
35+
36+
* Active and Thriving - Perth Airport supports **SP and IDP** initiated SSO.
37+
38+
> [!NOTE]
39+
> Identifier of this application is a fixed string value so only one instance can be configured in one tenant.
40+
41+
## Add Active and Thriving - Perth Airport from the gallery
42+
43+
To configure the integration of Active and Thriving - Perth Airport into Azure AD, you need to add Active and Thriving - Perth Airport from the gallery to your list of managed SaaS apps.
44+
45+
1. Sign in to the Azure portal using either a work or school account, or a personal Microsoft account.
46+
1. On the left navigation pane, select the **Azure Active Directory** service.
47+
1. Navigate to **Enterprise Applications** and then select **All Applications**.
48+
1. To add new application, select **New application**.
49+
1. In the **Add from the gallery** section, type **Active and Thriving - Perth Airport** in the search box.
50+
1. Select **Active and Thriving - Perth Airport** from results panel and then add the app. Wait a few seconds while the app is added to your tenant.
51+
52+
## Configure and test Azure AD SSO for Active and Thriving - Perth Airport
53+
54+
Configure and test Azure AD SSO with Active and Thriving - Perth Airport using a test user called **B.Simon**. For SSO to work, you need to establish a link relationship between an Azure AD user and the related user in Active and Thriving - Perth Airport.
55+
56+
To configure and test Azure AD SSO with Active and Thriving - Perth Airport, perform the following steps:
57+
58+
1. **[Configure Azure AD SSO](#configure-azure-ad-sso)** - to enable your users to use this feature.
59+
1. **[Create an Azure AD test user](#create-an-azure-ad-test-user)** - to test Azure AD single sign-on with B.Simon.
60+
1. **[Assign the Azure AD test user](#assign-the-azure-ad-test-user)** - to enable B.Simon to use Azure AD single sign-on.
61+
1. **[Configure Active and Thriving - Perth Airport SSO](#configure-active-and-thriving---perth-airport-sso)** - to configure the single sign-on settings on application side.
62+
1. **[Create Active and Thriving - Perth Airport test user](#create-active-and-thriving---perth-airport-test-user)** - to have a counterpart of B.Simon in Active and Thriving - Perth Airport that is linked to the Azure AD representation of user.
63+
1. **[Test SSO](#test-sso)** - to verify whether the configuration works.
64+
65+
## Configure Azure AD SSO
66+
67+
Follow these steps to enable Azure AD SSO in the Azure portal.
68+
69+
1. In the Azure portal, on the **Active and Thriving - Perth Airport** application integration page, find the **Manage** section and select **single sign-on**.
70+
1. On the **Select a single sign-on method** page, select **SAML**.
71+
1. On the **Set up single sign-on with SAML** page, click the pencil icon for **Basic SAML Configuration** to edit the settings.
72+
73+
![Edit Basic SAML Configuration](common/edit-urls.png)
74+
75+
1. On the **Basic SAML Configuration** section, the user does not have to perform any step as the app is already pre-integrated with Azure.
76+
77+
1. On the **Basic SAML Configuration** section perform the following steps, if you wish to configure the application in SP initiated mode:
78+
79+
a. In the **Identifier** text box, type the URL:
80+
`https://sso-perthairport.activeandthriving.com.au/saml2/aad/metadata`
81+
82+
b. In the **Reply URL** text box, type the URL:
83+
`https://sso-perthairport.activeandthriving.com.au/saml2/aad/login`
84+
85+
c. In the **Sign-on URL** text box, type the URL:
86+
`https://sso-perthairport.activeandthriving.com.au/saml2/aad/login`
87+
88+
1. On the **Set up single sign-on with SAML** page, in the **SAML Signing Certificate** section, find **Certificate (Base64)** and select **Download** to download the certificate and save it on your computer.
89+
90+
![The Certificate download link](common/certificatebase64.png)
91+
92+
1. On the **Set up Active and Thriving - Perth Airport** section, copy the appropriate URL(s) based on your requirement.
93+
94+
![Copy configuration URLs](common/copy-configuration-urls.png)
95+
96+
### Create an Azure AD test user
97+
98+
In this section, you'll create a test user in the Azure portal called B.Simon.
99+
100+
1. From the left pane in the Azure portal, select **Azure Active Directory**, select **Users**, and then select **All users**.
101+
1. Select **New user** at the top of the screen.
102+
1. In the **User** properties, follow these steps:
103+
1. In the **Name** field, enter `B.Simon`.
104+
1. In the **User name** field, enter the [email protected]. For example, `[email protected]`.
105+
1. Select the **Show password** check box, and then write down the value that's displayed in the **Password** box.
106+
1. Click **Create**.
107+
108+
### Assign the Azure AD test user
109+
110+
In this section, you'll enable B.Simon to use Azure single sign-on by granting access to Active and Thriving - Perth Airport.
111+
112+
1. In the Azure portal, select **Enterprise Applications**, and then select **All applications**.
113+
1. In the applications list, select **Active and Thriving - Perth Airport**.
114+
1. In the app's overview page, find the **Manage** section and select **Users and groups**.
115+
1. Select **Add user**, then select **Users and groups** in the **Add Assignment** dialog.
116+
1. In the **Users and groups** dialog, select **B.Simon** from the Users list, then click the **Select** button at the bottom of the screen.
117+
1. If you are expecting a role to be assigned to the users, you can select it from the **Select a role** dropdown. If no role has been set up for this app, you see "Default Access" role selected.
118+
1. In the **Add Assignment** dialog, click the **Assign** button.
119+
120+
## Configure Active and Thriving - Perth Airport SSO
121+
122+
To configure single sign-on on **Active and Thriving - Perth Airport** side, you need to send the downloaded **Certificate (Base64)** and appropriate copied URLs from Azure portal to [Active and Thriving - Perth Airport support team](mailto:[email protected]). They set this setting to have the SAML SSO connection set properly on both sides.
123+
124+
### Create Active and Thriving - Perth Airport test user
125+
126+
In this section, you create a user called Britta Simon in Active and Thriving - Perth Airport. Work with [Active and Thriving - Perth Airport support team](mailto:[email protected]) to add the users in the Active and Thriving - Perth Airport platform. Users must be created and activated before you use single sign-on.
127+
128+
## Test SSO
129+
130+
In this section, you test your Azure AD single sign-on configuration with following options.
131+
132+
#### SP initiated:
133+
134+
* Click on **Test this application** in Azure portal. This will redirect to Active and Thriving - Perth Airport Sign on URL where you can initiate the login flow.
135+
136+
* Go to Active and Thriving - Perth Airport Sign-on URL directly and initiate the login flow from there.
137+
138+
#### IDP initiated:
139+
140+
* Click on **Test this application** in Azure portal and you should be automatically signed in to the Active and Thriving - Perth Airport for which you set up the SSO.
141+
142+
You can also use Microsoft My Apps to test the application in any mode. When you click the Active and Thriving - Perth Airport tile in the My Apps, if configured in SP mode you would be redirected to the application sign on page for initiating the login flow and if configured in IDP mode, you should be automatically signed in to the Active and Thriving - Perth Airport for which you set up the SSO. For more information about the My Apps, see [Introduction to the My Apps](../user-help/my-apps-portal-end-user-access.md).
143+
144+
## Next steps
145+
146+
Once you configure Active and Thriving - Perth Airport you can enforce session control, which protects exfiltration and infiltration of your organization’s sensitive data in real time. Session control extends from Conditional Access. [Learn how to enforce session control with Microsoft Cloud App Security](/cloud-app-security/proxy-deployment-aad).

‎articles/active-directory/saas-apps/frontify-tutorial.md

Lines changed: 21 additions & 36 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
---
2-
title: 'Tutorial: Azure Active Directory single sign-on (SSO) integration with Frontify | Microsoft Docs'
2+
title: 'Tutorial: Azure AD SSO integration with Frontify'
33
description: Learn how to configure single sign-on between Azure Active Directory and Frontify.
44
services: active-directory
55
author: jeevansd
@@ -9,20 +9,18 @@ ms.service: active-directory
99
ms.subservice: saas-app-tutorial
1010
ms.workload: identity
1111
ms.topic: tutorial
12-
ms.date: 04/02/2020
12+
ms.date: 12/01/2021
1313
ms.author: jeedes
1414
---
1515

16-
# Tutorial: Azure Active Directory single sign-on (SSO) integration with Frontify
16+
# Tutorial: Azure AD SSO integration with Frontify
1717

1818
In this tutorial, you'll learn how to integrate Frontify with Azure Active Directory (Azure AD). When you integrate Frontify with Azure AD, you can:
1919

2020
* Control in Azure AD who has access to Frontify.
2121
* Enable your users to be automatically signed-in to Frontify with their Azure AD accounts.
2222
* Manage your accounts in one central location - the Azure portal.
2323

24-
To learn more about SaaS app integration with Azure AD, see [What is application access and single sign-on with Azure Active Directory](../manage-apps/what-is-single-sign-on.md).
25-
2624
## Prerequisites
2725

2826
To get started, you need the following items:
@@ -35,24 +33,23 @@ To get started, you need the following items:
3533
In this tutorial, you configure and test Azure AD SSO in a test environment.
3634

3735
* Frontify supports **SP** initiated SSO.
38-
* Once you configure Frontify you can enforce session control, which protects exfiltration and infiltration of your organization’s sensitive data in real time. Session control extends from Conditional Access. [Learn how to enforce session control with Microsoft Defender for Cloud Apps](/cloud-app-security/proxy-deployment-any-app).
3936

40-
## Adding Frontify from the gallery
37+
## Add Frontify from the gallery
4138

4239
To configure the integration of Frontify into Azure AD, you need to add Frontify from the gallery to your list of managed SaaS apps.
4340

44-
1. Sign in to the [Azure portal](https://portal.azure.com) using either a work or school account, or a personal Microsoft account.
41+
1. Sign in to the Azure portal using either a work or school account, or a personal Microsoft account.
4542
1. On the left navigation pane, select the **Azure Active Directory** service.
4643
1. Navigate to **Enterprise Applications** and then select **All Applications**.
4744
1. To add new application, select **New application**.
4845
1. In the **Add from the gallery** section, type **Frontify** in the search box.
4946
1. Select **Frontify** from results panel and then add the app. Wait a few seconds while the app is added to your tenant.
5047

51-
## Configure and test Azure AD single sign-on for Frontify
48+
## Configure and test Azure AD SSO for Frontify
5249

5350
Configure and test Azure AD SSO with Frontify using a test user called **B.Simon**. For SSO to work, you need to establish a link relationship between an Azure AD user and the related user in Frontify.
5451

55-
To configure and test Azure AD SSO with Frontify, complete the following building blocks:
52+
To configure and test Azure AD SSO with Frontify, perform the following steps:
5653

5754
1. **[Configure Azure AD SSO](#configure-azure-ad-sso)** - to enable your users to use this feature.
5855
1. **[Create an Azure AD test user](#create-an-azure-ad-test-user)** - to test Azure AD single sign-on with B.Simon.
@@ -65,22 +62,22 @@ To configure and test Azure AD SSO with Frontify, complete the following buildin
6562

6663
Follow these steps to enable Azure AD SSO in the Azure portal.
6764

68-
1. In the [Azure portal](https://portal.azure.com/), on the **Frontify** application integration page, find the **Manage** section and select **single sign-on**.
65+
1. In the Azure portal, on the **Frontify** application integration page, find the **Manage** section and select **single sign-on**.
6966
1. On the **Select a single sign-on method** page, select **SAML**.
70-
1. On the **Set up single sign-on with SAML** page, click the edit/pen icon for **Basic SAML Configuration** to edit the settings.
67+
1. On the **Set up single sign-on with SAML** page, click the pencil icon for **Basic SAML Configuration** to edit the settings.
7168

7269
![Edit Basic SAML Configuration](common/edit-urls.png)
7370

74-
1. On the **Basic SAML Configuration** section, enter the values for the following fields:
75-
76-
a. In the **Sign-on URL** text box, type a URL using the following pattern:
77-
`https://<DOMAIN NAME>/`
71+
1. On the **Basic SAML Configuration** section, perform the following steps:
7872

79-
b. In the **Identifier (Entity ID)** text box, type a URL using the following pattern:
73+
a. In the **Identifier (Entity ID)** text box, type a URL using the following pattern:
8074
`https://<DOMAIN NAME>/api/auth/saml/metadata/`
75+
76+
b. In the **Sign-on URL** text box, type a URL using the following pattern:
77+
`https://<DOMAIN NAME>/`
8178

8279
> [!NOTE]
83-
> These values are not real. Update these values with the actual Sign on URL and Identifier. Contact [Frontify Client support team](mailto:[email protected]) to get these values. You can also refer to the patterns shown in the **Basic SAML Configuration** section in the Azure portal.
80+
> These values are not real. Update these values with the actual Identifier and Sign on URL. Contact [Frontify Client support team](mailto:[email protected]) to get these values. You can also refer to the patterns shown in the **Basic SAML Configuration** section in the Azure portal.
8481

8582
1. On the **Set-up single sign-on with SAML** page, In the **SAML Signing Certificate** section, click copy button to copy **App Federation Metadata Url** and save it on your computer.
8683

@@ -105,13 +102,7 @@ In this section, you'll enable B.Simon to use Azure single sign-on by granting a
105102
1. In the Azure portal, select **Enterprise Applications**, and then select **All applications**.
106103
1. In the applications list, select **Frontify**.
107104
1. In the app's overview page, find the **Manage** section and select **Users and groups**.
108-
109-
![The "Users and groups" link](common/users-groups-blade.png)
110-
111105
1. Select **Add user**, then select **Users and groups** in the **Add Assignment** dialog.
112-
113-
![The Add User link](common/add-assign-user.png)
114-
115106
1. In the **Users and groups** dialog, select **B.Simon** from the Users list, then click the **Select** button at the bottom of the screen.
116107
1. If you're expecting any role value in the SAML assertion, in the **Select Role** dialog, select the appropriate role for the user from the list and then click the **Select** button at the bottom of the screen.
117108
1. In the **Add Assignment** dialog, click the **Assign** button.
@@ -126,20 +117,14 @@ In this section, you create a user called Britta Simon in Frontify. Work with [F
126117

127118
## Test SSO
128119

129-
In this section, you test your Azure AD single sign-on configuration using the Access Panel.
130-
131-
When you click the Frontify tile in the Access Panel, you should be automatically signed in to the Frontify for which you set up SSO. For more information about the Access Panel, see [Introduction to the Access Panel](https://support.microsoft.com/account-billing/sign-in-and-start-apps-from-the-my-apps-portal-2f3b1bae-0e5a-4a86-a33e-876fbd2a4510).
132-
133-
## Additional resources
134-
135-
- [ List of Tutorials on How to Integrate SaaS Apps with Azure Active Directory ](./tutorial-list.md)
120+
In this section, you test your Azure AD single sign-on configuration with following options.
136121

137-
- [What is application access and single sign-on with Azure Active Directory? ](../manage-apps/what-is-single-sign-on.md)
122+
* Click on **Test this application** in Azure portal. This will redirect to Frontify Sign-on URL where you can initiate the login flow.
138123

139-
- [What is conditional access in Azure Active Directory?](../conditional-access/overview.md)
124+
* Go to Frontify Sign-on URL directly and initiate the login flow from there.
140125

141-
- [Try Frontify with Azure AD](https://aad.portal.azure.com/)
126+
* You can use Microsoft My Apps. When you click the Frontify tile in the My Apps, this will redirect to Frontify Sign-on URL. For more information about the My Apps, see [Introduction to the My Apps](../user-help/my-apps-portal-end-user-access.md).
142127

143-
- [What is session control in Microsoft Defender for Cloud Apps?](/cloud-app-security/proxy-intro-aad)
128+
## Next steps
144129

145-
- [How to protect Frontify with advanced visibility and controls](/cloud-app-security/proxy-intro-aad)
130+
Once you configure Frontify you can enforce session control, which protects exfiltration and infiltration of your organization’s sensitive data in real time. Session control extends from Conditional Access. [Learn how to enforce session control with Microsoft Cloud App Security](/cloud-app-security/proxy-deployment-aad).

0 commit comments

Comments
 (0)