|
| 1 | +--- |
| 2 | +title: 'Tutorial: Azure Active Directory integration with Dovetale | Microsoft Docs' |
| 3 | +description: Learn how to configure single sign-on between Azure Active Directory and Dovetale. |
| 4 | +services: active-directory |
| 5 | +documentationCenter: na |
| 6 | +author: jeevansd |
| 7 | +manager: femila |
| 8 | +ms.reviewer: joflore |
| 9 | + |
| 10 | +ms.assetid: 81da50c3-df94-458a-8b6a-a30827ee6358 |
| 11 | +ms.service: active-directory |
| 12 | +ms.workload: identity |
| 13 | +ms.tgt_pltfrm: na |
| 14 | +ms.devlang: na |
| 15 | +ms.topic: article |
| 16 | +ms.date: 08/09/2018 |
| 17 | +ms.author: jeedes |
| 18 | + |
| 19 | +--- |
| 20 | +# Tutorial: Azure Active Directory integration with Dovetale |
| 21 | + |
| 22 | +In this tutorial, you learn how to integrate Dovetale with Azure Active Directory (Azure AD). |
| 23 | + |
| 24 | +Integrating Dovetale with Azure AD provides you with the following benefits: |
| 25 | + |
| 26 | +- You can control in Azure AD who has access to Dovetale. |
| 27 | +- You can enable your users to automatically get signed-on to Dovetale (Single Sign-On) with their Azure AD accounts. |
| 28 | +- You can manage your accounts in one central location - the Azure portal. |
| 29 | + |
| 30 | +If you want to know more details about SaaS app integration with Azure AD, see [what is application access and single sign-on with Azure Active Directory](../manage-apps/what-is-single-sign-on.md) |
| 31 | + |
| 32 | +## Prerequisites |
| 33 | + |
| 34 | +To configure Azure AD integration with Dovetale, you need the following items: |
| 35 | + |
| 36 | +- An Azure AD subscription |
| 37 | +- A Dovetale single sign-on enabled subscription |
| 38 | + |
| 39 | +> [!NOTE] |
| 40 | +> To test the steps in this tutorial, we do not recommend using a production environment. |
| 41 | +
|
| 42 | +To test the steps in this tutorial, you should follow these recommendations: |
| 43 | + |
| 44 | +- Do not use your production environment, unless it is necessary. |
| 45 | +- If you don't have an Azure AD trial environment, you can [get a one-month trial](https://azure.microsoft.com/pricing/free-trial/). |
| 46 | + |
| 47 | +## Scenario description |
| 48 | + |
| 49 | +In this tutorial, you test Azure AD single sign-on in a test environment. |
| 50 | +The scenario outlined in this tutorial consists of two main building blocks: |
| 51 | + |
| 52 | +1. Adding Dovetale from the gallery |
| 53 | +2. Configuring and testing Azure AD single sign-on |
| 54 | + |
| 55 | +## Adding Dovetale from the gallery |
| 56 | + |
| 57 | +To configure the integration of Dovetale into Azure AD, you need to add Dovetale from the gallery to your list of managed SaaS apps. |
| 58 | + |
| 59 | +**To add Dovetale from the gallery, perform the following steps:** |
| 60 | + |
| 61 | +1. In the **[Azure portal](https://portal.azure.com)**, on the left navigation panel, click **Azure Active Directory** icon. |
| 62 | + |
| 63 | + ![The Azure Active Directory button][1] |
| 64 | + |
| 65 | +2. Navigate to **Enterprise applications**. Then go to **All applications**. |
| 66 | + |
| 67 | + ![The Enterprise applications blade][2] |
| 68 | + |
| 69 | +3. To add new application, click **New application** button on the top of dialog. |
| 70 | + |
| 71 | + ![The New application button][3] |
| 72 | + |
| 73 | +4. In the search box, type **Dovetale**, select **Dovetale** from result panel then click **Add** button to add the application. |
| 74 | + |
| 75 | +  |
| 76 | + |
| 77 | +## Configure and test Azure AD single sign-on |
| 78 | + |
| 79 | +In this section, you configure and test Azure AD single sign-on with Dovetale based on a test user called "Britta Simon". |
| 80 | + |
| 81 | +For single sign-on to work, Azure AD needs to know what the counterpart user in Dovetale is to a user in Azure AD. In other words, a link relationship between an Azure AD user and the related user in Dovetale needs to be established. |
| 82 | + |
| 83 | +To configure and test Azure AD single sign-on with Dovetale, you need to complete the following building blocks: |
| 84 | + |
| 85 | +1. **[Configure Azure AD Single Sign-On](#configure-azure-ad-single-sign-on)** - to enable your users to use this feature. |
| 86 | +2. **[Create an Azure AD test user](#create-an-azure-ad-test-user)** - to test Azure AD single sign-on with Britta Simon. |
| 87 | +3. **[Create a Dovetale test user](#create-a-dovetale-test-user)** - to have a counterpart of Britta Simon in Dovetale that is linked to the Azure AD representation of user. |
| 88 | +4. **[Assign the Azure AD test user](#assign-the-azure-ad-test-user)** - to enable Britta Simon to use Azure AD single sign-on. |
| 89 | +5. **[Test single sign-on](#test-single-sign-on)** - to verify whether the configuration works. |
| 90 | + |
| 91 | +### Configure Azure AD single sign-on |
| 92 | + |
| 93 | +In this section, you enable Azure AD single sign-on in the Azure portal and configure single sign-on in your Dovetale application. |
| 94 | + |
| 95 | +**To configure Azure AD single sign-on with Dovetale, perform the following steps:** |
| 96 | + |
| 97 | +1. In the Azure portal, on the **Dovetale** application integration page, click **Single sign-on**. |
| 98 | + |
| 99 | + ![Configure single sign-on link][4] |
| 100 | + |
| 101 | +2. On the **Single sign-on** dialog, select **Mode** as **SAML-based Sign-on** to enable single sign-on. |
| 102 | + |
| 103 | +  |
| 104 | + |
| 105 | +3. On the **Dovetale Domain and URLs** section, if you wish to configure the application in **IDP** initiated mode, the user does not have to perform any steps as the app is already pre-integrated with Azure: |
| 106 | + |
| 107 | +  |
| 108 | + |
| 109 | +4. Check **Show advanced URL settings** and perform the following step if you wish to configure the application in **SP** initiated mode: |
| 110 | + |
| 111 | +  |
| 112 | + |
| 113 | + In the **Sign-on URL** textbox, type a URL using the following pattern: `<COMPANYNAME>.dovetale.com` |
| 114 | + |
| 115 | + > [!NOTE] |
| 116 | + > This value is not real. Update this value with the actual Sign-On URL. Contact [Dovetale Client support team](mailto:[email protected]) to get this value. |
| 117 | + |
| 118 | +5. Dovetale application expects the SAML assertions in a specific format. Please configure the following claims for this application. You can manage the values of these attributes from the "**User Attributes**" section on application integration page. The following screenshot shows an example for this. |
| 119 | + |
| 120 | +  |
| 121 | + |
| 122 | +6. Click **View and edit all other user attributes** checkbox in the **User Attributes** section to expand the attributes. Perform the following steps on each of the displayed attributes- |
| 123 | + |
| 124 | + | Attribute Name | Attribute Value | |
| 125 | + | ---------------| --------------- | |
| 126 | + | email | user.mail | |
| 127 | + | first_name | user.givenname | |
| 128 | + | name | user.userprincipalname | |
| 129 | + | last_name | user.surname | |
| 130 | + |
| 131 | + a. Click **Add attribute** to open the **Add Attribute** dialog. |
| 132 | + |
| 133 | +  |
| 134 | + |
| 135 | +  |
| 136 | + |
| 137 | + b. In the **Name** textbox, type the **attribute name** shown for that row. |
| 138 | + |
| 139 | + c. From the **Value** list, type the attribute value shown for that row. |
| 140 | + |
| 141 | + d. Leave **NAMESPACE** value blank. |
| 142 | + |
| 143 | + e. Click **Ok**. |
| 144 | + |
| 145 | +7. On the **SAML Signing Certificate** section, click the copy button to copy **App Federation Metadata Url** and paste it into notepad. |
| 146 | + |
| 147 | +  |
| 148 | + |
| 149 | +8. Click **Save** button. |
| 150 | + |
| 151 | +  |
| 152 | + |
| 153 | +9. On the **Dovetale Configuration** section, click **Configure Dovetale** to open **Configure sign-on** window. Copy the **SAML Entity ID and SAML Single Sign-On Service URL** from the **Quick Reference section.** |
| 154 | + |
| 155 | +  |
| 156 | + |
| 157 | +10. To configure single sign-on on **Dovetale ** side, you need to send the **App Federation Metadata Url, SAML Entity ID, and SAML Single Sign-On Service URL ** to [Dovetale support team ](mailto:[email protected]). They set this setting to have the SAML SSO connection set properly on both sides. |
| 158 | + |
| 159 | +### Create an Azure AD test user |
| 160 | + |
| 161 | +The objective of this section is to create a test user in the Azure portal called Britta Simon. |
| 162 | + |
| 163 | + ![Create an Azure AD test user][100] |
| 164 | + |
| 165 | +**To create a test user in Azure AD, perform the following steps:** |
| 166 | + |
| 167 | +1. In the Azure portal, in the left pane, click the **Azure Active Directory** button. |
| 168 | + |
| 169 | +  |
| 170 | + |
| 171 | +2. To display the list of users, go to **Users and groups**, and then click **All users**. |
| 172 | + |
| 173 | +  |
| 174 | + |
| 175 | +3. To open the **User** dialog box, click **Add** at the top of the **All Users** dialog box. |
| 176 | + |
| 177 | +  |
| 178 | + |
| 179 | +4. In the **User** dialog box, perform the following steps: |
| 180 | + |
| 181 | +  |
| 182 | + |
| 183 | + a. In the **Name** box, type **BrittaSimon**. |
| 184 | + |
| 185 | + b. In the **User name** box, type the email address of user Britta Simon. |
| 186 | + |
| 187 | + c. Select the **Show Password** check box, and then write down the value that's displayed in the **Password** box. |
| 188 | + |
| 189 | + d. Click **Create**. |
| 190 | + |
| 191 | +### Create a Dovetale test user |
| 192 | + |
| 193 | +The objective of this section is to create a user called Britta Simon in Dovetale. Dovetale supports just-in-time provisioning, which is by default enabled. There is no action item for you in this section. A new user is created during an attempt to access Dovetale if it doesn't exist yet. |
| 194 | + |
| 195 | +> [!Note] |
| 196 | +> If you need to create a user manually, contact [Dovetale support team](mailto:[email protected]). |
| 197 | +
|
| 198 | +### Assign the Azure AD test user |
| 199 | + |
| 200 | +In this section, you enable Britta Simon to use Azure single sign-on by granting access to Dovetale. |
| 201 | + |
| 202 | +![Assign the user role][200] |
| 203 | + |
| 204 | +**To assign Britta Simon to Dovetale, perform the following steps:** |
| 205 | + |
| 206 | +1. In the Azure portal, open the applications view, and then navigate to the directory view and go to **Enterprise applications** then click **All applications**. |
| 207 | + |
| 208 | + ![Assign User][201] |
| 209 | + |
| 210 | +2. In the applications list, select **Dovetale**. |
| 211 | + |
| 212 | +  |
| 213 | + |
| 214 | +3. In the menu on the left, click **Users and groups**. |
| 215 | + |
| 216 | + ![The "Users and groups" link][202] |
| 217 | + |
| 218 | +4. Click **Add** button. Then select **Users and groups** on **Add Assignment** dialog. |
| 219 | + |
| 220 | + ![The Add Assignment pane][203] |
| 221 | + |
| 222 | +5. On **Users and groups** dialog, select **Britta Simon** in the Users list. |
| 223 | + |
| 224 | +6. Click **Select** button on **Users and groups** dialog. |
| 225 | + |
| 226 | +7. Click **Assign** button on **Add Assignment** dialog. |
| 227 | + |
| 228 | +### Test single sign-on |
| 229 | + |
| 230 | +In this section, you test your Azure AD single sign-on configuration using the Access Panel. |
| 231 | + |
| 232 | +When you click the Dovetale tile in the Access Panel, you should get automatically signed-on to your Dovetale application. |
| 233 | +For more information about the Access Panel, see [Introduction to the Access Panel](../user-help/active-directory-saas-access-panel-introduction.md). |
| 234 | + |
| 235 | +## Additional resources |
| 236 | + |
| 237 | +* [List of Tutorials on How to Integrate SaaS Apps with Azure Active Directory](tutorial-list.md) |
| 238 | +* [What is application access and single sign-on with Azure Active Directory?](../manage-apps/what-is-single-sign-on.md) |
| 239 | + |
| 240 | +<!--Image references--> |
| 241 | + |
| 242 | +[1]: ./media/dovetale-tutorial/tutorial_general_01.png |
| 243 | +[2]: ./media/dovetale-tutorial/tutorial_general_02.png |
| 244 | +[3]: ./media/dovetale-tutorial/tutorial_general_03.png |
| 245 | +[4]: ./media/dovetale-tutorial/tutorial_general_04.png |
| 246 | + |
| 247 | +[100]: ./media/dovetale-tutorial/tutorial_general_100.png |
| 248 | + |
| 249 | +[200]: ./media/dovetale-tutorial/tutorial_general_200.png |
| 250 | +[201]: ./media/dovetale-tutorial/tutorial_general_201.png |
| 251 | +[202]: ./media/dovetale-tutorial/tutorial_general_202.png |
| 252 | +[203]: ./media/dovetale-tutorial/tutorial_general_203.png |
0 commit comments