Skip to content

Commit 8836227

Browse files
Maggiemouse1Maggiemouse1
authored
Merge pull request #194936 from bhavana-129/smart360
Product Backlog Item 1858719: SaaS App Tutorial: Smart360
2 parents ab120e3 + 012ac2b commit 8836227

File tree

2 files changed

+152
-0
lines changed

2 files changed

+152
-0
lines changed

‎articles/active-directory/saas-apps/smart360-tutorial.md

Lines changed: 150 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,150 @@
1+
---
2+
title: 'Tutorial: Azure AD SSO integration with Smart360'
3+
description: Learn how to configure single sign-on between Azure Active Directory and Smart360.
4+
services: active-directory
5+
author: jeevansd
6+
manager: CelesteDG
7+
ms.reviewer: CelesteDG
8+
ms.service: active-directory
9+
ms.subservice: saas-app-tutorial
10+
ms.workload: identity
11+
ms.topic: tutorial
12+
ms.date: 04/13/2022
13+
ms.author: jeedes
14+
15+
---
16+
17+
# Tutorial: Azure AD SSO integration with Smart360
18+
19+
In this tutorial, you'll learn how to integrate Smart360 with Azure Active Directory (Azure AD). When you integrate Smart360 with Azure AD, you can:
20+
21+
* Control in Azure AD who has access to Smart360.
22+
* Enable your users to be automatically signed-in to Smart360 with their Azure AD accounts.
23+
* Manage your accounts in one central location - the Azure portal.
24+
25+
## Prerequisites
26+
27+
To get started, you need the following items:
28+
29+
* An Azure AD subscription. If you don't have a subscription, you can get a [free account](https://azure.microsoft.com/free/).
30+
* Smart360 single sign-on (SSO) enabled subscription.
31+
* Along with Cloud Application Administrator, Application Administrator can also add or manage applications in Azure AD.
32+
For more information, see [Azure built-in roles](../roles/permissions-reference.md).
33+
34+
## Scenario description
35+
36+
In this tutorial, you configure and test Azure AD SSO in a test environment.
37+
38+
* Smart360 supports **SP** initiated SSO.
39+
* Smart360 supports **Just In Time** user provisioning.
40+
41+
## Add Smart360 from the gallery
42+
43+
To configure the integration of Smart360 into Azure AD, you need to add Smart360 from the gallery to your list of managed SaaS apps.
44+
45+
1. Sign in to the Azure portal using either a work or school account, or a personal Microsoft account.
46+
1. On the left navigation pane, select the **Azure Active Directory** service.
47+
1. Navigate to **Enterprise Applications** and then select **All Applications**.
48+
1. To add new application, select **New application**.
49+
1. In the **Add from the gallery** section, type **Smart360** in the search box.
50+
1. Select **Smart360** from results panel and then add the app. Wait a few seconds while the app is added to your tenant.
51+
52+
## Configure and test Azure AD SSO for Smart360
53+
54+
Configure and test Azure AD SSO with Smart360 using a test user called **B.Simon**. For SSO to work, you need to establish a link relationship between an Azure AD user and the related user in Smart360.
55+
56+
To configure and test Azure AD SSO with Smart360, perform the following steps:
57+
58+
1. **[Configure Azure AD SSO](#configure-azure-ad-sso)** - to enable your users to use this feature.
59+
1. **[Create an Azure AD test user](#create-an-azure-ad-test-user)** - to test Azure AD single sign-on with B.Simon.
60+
1. **[Assign the Azure AD test user](#assign-the-azure-ad-test-user)** - to enable B.Simon to use Azure AD single sign-on.
61+
1. **[Configure Smart360 SSO](#configure-smart360-sso)** - to configure the single sign-on settings on application side.
62+
1. **[Create Smart360 test user](#create-smart360-test-user)** - to have a counterpart of B.Simon in Smart360 that is linked to the Azure AD representation of user.
63+
1. **[Test SSO](#test-sso)** - to verify whether the configuration works.
64+
65+
## Configure Azure AD SSO
66+
67+
Follow these steps to enable Azure AD SSO in the Azure portal.
68+
69+
1. In the Azure portal, on the **Smart360** application integration page, find the **Manage** section and select **single sign-on**.
70+
1. On the **Select a single sign-on method** page, select **SAML**.
71+
1. On the **Set up single sign-on with SAML** page, click the pencil icon for **Basic SAML Configuration** to edit the settings.
72+
73+
![Edit Basic SAML Configuration](common/edit-urls.png)
74+
75+
1. On the **Basic SAML Configuration** section, perform the following steps:
76+
77+
a. In the **Identifier** text box, type a value using the following pattern:
78+
`urn:sso:<CustomerName>:smart360:primary`
79+
80+
b. In the **Reply URL** text box, type a URL using the following pattern:
81+
`https://<CustomerName>.smart360.biz/smart360/saml/SSO`
82+
83+
c. In the **Sign-on URL** text box, type a URL using the following pattern:
84+
`https://<CustomerName>.smart360.biz`
85+
86+
> [!NOTE]
87+
> These values are not real. Update these values with the actual Identifier, Reply URL and Sign-on URL. Contact [Smart360 Client support team](mailto:[email protected]) to get these values. You can also refer to the patterns shown in the **Basic SAML Configuration** section in the Azure portal.
88+
89+
1. Your Smart360 application expects the SAML assertions in a specific format, which requires you to add custom attribute mappings to your SAML token attributes configuration. The following screenshot shows the list of default attributes. Click **Edit** icon to open **User Attributes** dialog.
90+
91+
![Screenshot shows User Attributes with the Edit icon selected.](common/edit-attribute.png)
92+
93+
1. In addition to above, Smart360 application expects few more attributes to be passed back in SAML response. In the **User Claims** section on the **User Attributes** dialog, perform the following steps to add SAML token attribute as shown in the below table:
94+
95+
| Name | Source Attribute |
96+
| -------- | ------------------ |
97+
| role | user.assignedroles |
98+
99+
> [!NOTE]
100+
> Please click [here](../develop/howto-add-app-roles-in-azure-ad-apps.md#app-roles-ui) to know how to configure Role in Azure AD.
101+
102+
1. On the **Set up single sign-on with SAML** page, In the **SAML Signing Certificate** section, click copy button to copy **App Federation Metadata Url** and save it on your computer.
103+
104+
![The Certificate download link](common/copy-metadataurl.png)
105+
106+
### Create an Azure AD test user
107+
108+
In this section, you'll create a test user in the Azure portal called B.Simon.
109+
110+
1. From the left pane in the Azure portal, select **Azure Active Directory**, select **Users**, and then select **All users**.
111+
1. Select **New user** at the top of the screen.
112+
1. In the **User** properties, follow these steps:
113+
1. In the **Name** field, enter `B.Simon`.
114+
1. In the **User name** field, enter the [email protected]. For example, `[email protected]`.
115+
1. Select the **Show password** check box, and then write down the value that's displayed in the **Password** box.
116+
1. Click **Create**.
117+
118+
### Assign the Azure AD test user
119+
120+
In this section, you'll enable B.Simon to use Azure single sign-on by granting access to Smart360.
121+
122+
1. In the Azure portal, select **Enterprise Applications**, and then select **All applications**.
123+
1. In the applications list, select **Smart360**.
124+
1. In the app's overview page, find the **Manage** section and select **Users and groups**.
125+
1. Select **Add user**, then select **Users and groups** in the **Add Assignment** dialog.
126+
1. In the **Users and groups** dialog, select **B.Simon** from the Users list, then click the **Select** button at the bottom of the screen.
127+
1. If you are expecting a role to be assigned to the users, you can select it from the **Select a role** dropdown. If no role has been set up for this app, you see "Default Access" role selected.
128+
1. In the **Add Assignment** dialog, click the **Assign** button.
129+
130+
## Configure Smart360 SSO
131+
132+
To configure single sign-on on **Smart360** side, you need to send the **App Federation Metadata Url** to [Smart360 support team](mailto:[email protected]). They set this setting to have the SAML SSO connection set properly on both sides.
133+
134+
### Create Smart360 test user
135+
136+
In this section, a user called Britta Simon is created in Smart360. Smart360 supports just-in-time user provisioning, which is enabled by default. There is no action item for you in this section. If a user doesn't already exist in Smart360, a new one is created after authentication.
137+
138+
## Test SSO
139+
140+
In this section, you test your Azure AD single sign-on configuration with following options.
141+
142+
* Click on **Test this application** in Azure portal. This will redirect to Smart360 Sign-on URL where you can initiate the login flow.
143+
144+
* Go to Smart360 Sign-on URL directly and initiate the login flow from there.
145+
146+
* You can use Microsoft My Apps. When you click the Smart360 tile in the My Apps, this will redirect to Smart360 Sign-on URL. For more information about the My Apps, see [Introduction to the My Apps](../user-help/my-apps-portal-end-user-access.md).
147+
148+
## Next steps
149+
150+
Once you configure Smart360 you can enforce session control, which protects exfiltration and infiltration of your organization’s sensitive data in real time. Session control extends from Conditional Access. [Learn how to enforce session control with Microsoft Cloud App Security](/cloud-app-security/proxy-deployment-aad).

‎articles/active-directory/saas-apps/toc.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2016,6 +2016,8 @@
20162016
href: splan-visitor-tutorial.md
20172017
- name: Small Improvements
20182018
href: smallimprovements-tutorial.md
2019+
- name: Smart360
2020+
href: smart360-tutorial.md
20192021
- name: SmartDraw
20202022
href: smartdraw-tutorial.md
20212023
- name: SmarterU

0 commit comments

Comments
 (0)