Skip to content

Commit a7d7632

Browse files
PMEds28PMEds28
authored
Merge pull request #253574 from bhavana-129/mosaic-project
Product Backlog Item 2708393: SaaS App Tutorial: Mosaic Project Opera…
2 parents 06e085f + 9fdb56a commit a7d7632

File tree

2 files changed

+151
-0
lines changed

2 files changed

+151
-0
lines changed

‎articles/active-directory/saas-apps/mosaic-project-operations-tutorial.md

Lines changed: 149 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,149 @@
1+
---
2+
title: Microsoft Entra SSO integration with Mosaic Project Operations
3+
description: Learn how to configure single sign-on between Microsoft Entra ID and Mosaic Project Operations.
4+
services: active-directory
5+
author: jeevansd
6+
manager: CelesteDG
7+
ms.reviewer: CelesteDG
8+
ms.service: active-directory
9+
ms.subservice: saas-app-tutorial
10+
ms.workload: identity
11+
ms.topic: how-to
12+
ms.date: 10/03/2023
13+
ms.author: jeedes
14+
15+
---
16+
17+
# Microsoft Entra SSO integration with Mosaic Project Operations
18+
19+
In this tutorial, you'll learn how to integrate Mosaic Project Operations with Microsoft Entra ID. When you integrate Mosaic Project Operations with Microsoft Entra ID, you can:
20+
21+
* Control in Microsoft Entra ID who has access to Mosaic Project Operations.
22+
* Enable your users to be automatically signed-in to Mosaic Project Operations with their Microsoft Entra accounts.
23+
* Manage your accounts in one central location.
24+
25+
## Prerequisites
26+
27+
To integrate Microsoft Entra ID with Mosaic Project Operations, you need:
28+
29+
* A Microsoft Entra subscription. If you don't have a subscription, you can get a [free account](https://azure.microsoft.com/free/).
30+
* Mosaic Project Operations single sign-on (SSO) enabled subscription.
31+
32+
## Scenario description
33+
34+
In this tutorial, you configure and test Microsoft Entra SSO in a test environment.
35+
36+
* Mosaic Project Operations supports **SP** initiated SSO.
37+
38+
## Adding Mosaic Project Operations from the gallery
39+
40+
To configure the integration of Mosaic Project Operations into Microsoft Entra ID, you need to add Mosaic Project Operations from the gallery to your list of managed SaaS apps.
41+
42+
1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Cloud Application Administrator](../roles/permissions-reference.md#cloud-application-administrator).
43+
1. Browse to **Identity** > **Applications** > **Enterprise applications** > **New application**.
44+
1. In the **Add from the gallery** section, type **Mosaic Project Operations** in the search box.
45+
1. Select **Mosaic Project Operations** from results panel and then add the app. Wait a few seconds while the app is added to your tenant.
46+
47+
Alternatively, you can also use the [Enterprise App Configuration Wizard](https://portal.office.com/AdminPortal/home?Q=Docs#/azureadappintegration). In this wizard, you can add an application to your tenant, add users/groups to the app, assign roles, and walk through the SSO configuration as well. [Learn more about Microsoft 365 wizards.](/microsoft-365/admin/misc/azure-ad-setup-guides)
48+
49+
## Configure and test Microsoft Entra SSO for Mosaic Project Operations
50+
51+
Configure and test Microsoft Entra SSO with Mosaic Project Operations using a test user called **B.Simon**. For SSO to work, you need to establish a link relationship between a Microsoft Entra user and the related user in Mosaic Project Operations.
52+
53+
To configure and test Microsoft Entra SSO with Mosaic Project Operations, perform the following steps:
54+
55+
1. **[Configure Microsoft Entra SSO](#configure-microsoft-entra-sso)** - to enable your users to use this feature.
56+
1. **[Create a Microsoft Entra ID test user](#create-a-microsoft-entra-id-test-user)** - to test Microsoft Entra single sign-on with B.Simon.
57+
1. **[Assign the Microsoft Entra ID test user](#assign-the-microsoft-entra-id-test-user)** - to enable B.Simon to use Microsoft Entra single sign-on.
58+
1. **[Configure Mosaic Project Operations SSO](#configure-mosaic-project-operations-sso)** - to configure the single sign-on settings on application side.
59+
1. **[Create Mosaic Project Operations test user](#create-mosaic-project-operations-test-user)** - to have a counterpart of B.Simon in Mosaic Project Operations that is linked to the Microsoft Entra ID representation of user.
60+
1. **[Test SSO](#test-sso)** - to verify whether the configuration works.
61+
62+
## Configure Microsoft Entra SSO
63+
64+
Follow these steps to enable Microsoft Entra SSO in the Microsoft Entra admin center.
65+
66+
1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Cloud Application Administrator](../roles/permissions-reference.md#cloud-application-administrator).
67+
1. Browse to **Identity** > **Applications** > **Enterprise applications** > **Mosaic Project Operations** > **Single sign-on**.
68+
1. On the **Select a single sign-on method** page, select **SAML**.
69+
1. On the **Set up single sign-on with SAML** page, click the pencil icon for **Basic SAML Configuration** to edit the settings.
70+
71+
![Screenshot shows how to edit Basic SAML Configuration.](common/edit-urls.png "Basic Configuration")
72+
73+
1. On the **Basic SAML Configuration** section, perform the following steps:
74+
75+
a. In the **Identifier** textbox, type a URL using one of the following patterns:
76+
77+
| **Identifier** |
78+
|---------|
79+
| `https://auth.us-east-1.party.mosaicapp.com/<UUID>` |
80+
| `https://auth.us-east-1.<ENVIRONMENT>.mosaicapp.com/<UUID>` |
81+
82+
b. In the **Reply URL** textbox, type a URL using one of the following patterns:
83+
84+
| **Reply URL** |
85+
|---------|
86+
| `https://auth.us-east-1.party.mosaicapp.com/auth/saml/callback/<UUID>` |
87+
| `https://auth.us-east-1.<ENVIRONMENT>.mosaicapp.com/auth/saml/callback/<UUID>` |
88+
89+
c. In the **Sign on URL** textbox, type the URL:
90+
`https://login.mosaicapp.com/login`
91+
92+
> [!NOTE]
93+
> These values are not real. Update these values with the actual Identifier and Reply URL. Contact [Mosaic Project Operations support team](mailto:[email protected]) to get these values. You can also refer to the patterns shown in the **Basic SAML Configuration** section in the Microsoft Entra admin center.
94+
95+
1. On the **Set up single sign-on with SAML** page, in the **SAML Signing Certificate** section, find **Certificate (Base64)** and select **Download** to download the certificate and save it on your computer.
96+
97+
![Screenshot shows the Certificate download link.](common/certificatebase64.png "Certificate")
98+
99+
1. On the **Set up Mosaic Project Operations** section, copy the appropriate URL(s) based on your requirement.
100+
101+
![Screenshot shows to copy configuration appropriate URL.](common/copy-configuration-urls.png "Metadata")
102+
103+
### Create a Microsoft Entra ID test user
104+
105+
In this section, you'll create a test user in the Microsoft Entra admin center called B.Simon.
106+
107+
1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [User Administrator](../roles/permissions-reference.md#user-administrator).
108+
1. Browse to **Identity** > **Users** > **All users**.
109+
1. Select **New user** > **Create new user**, at the top of the screen.
110+
1. In the **User** properties, follow these steps:
111+
1. In the **Display name** field, enter `B.Simon`.
112+
1. In the **User principal name** field, enter the [email protected]. For example, `[email protected]`.
113+
1. Select the **Show password** check box, and then write down the value that's displayed in the **Password** box.
114+
1. Select **Review + create**.
115+
1. Select **Create**.
116+
117+
### Assign the Microsoft Entra ID test user
118+
119+
In this section, you'll enable B.Simon to use Microsoft Entra single sign-on by granting access to Mosaic Project Operations.
120+
121+
1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Cloud Application Administrator](../roles/permissions-reference.md#cloud-application-administrator).
122+
1. Browse to **Identity** > **Applications** > **Enterprise applications** > **Mosaic Project Operations**.
123+
1. In the app's overview page, select **Users and groups**.
124+
1. Select **Add user/group**, then select **Users and groups** in the **Add Assignment** dialog.
125+
1. In the **Users and groups** dialog, select **B.Simon** from the Users list, then click the **Select** button at the bottom of the screen.
126+
1. If you are expecting a role to be assigned to the users, you can select it from the **Select a role** dropdown. If no role has been set up for this app, you see "Default Access" role selected.
127+
1. In the **Add Assignment** dialog, click the **Assign** button.
128+
129+
## Configure Mosaic Project Operations SSO
130+
131+
To configure single sign-on on **Mosaic Project Operations** side, you need to send the downloaded **Certificate (Base64)** and appropriate copied URLs from Microsoft Entra admin center to [Mosaic Project Operations support team](mailto:[email protected]). They set this setting to have the SAML SSO connection set properly on both sides. For more information, please refer [this](https://readme.mosaicapp.com/docs/microsoft-azure-saml) link.
132+
133+
### Create Mosaic Project Operations test user
134+
135+
In this section, you create a user called B.Simon in Mosaic Project Operations. Work with [Mosaic Project Operations support team](mailto:[email protected]) to add the users in the Mosaic Project Operations platform. Users must be created and activated before you use single sign-on.
136+
137+
## Test SSO
138+
139+
In this section, you test your Microsoft Entra single sign-on configuration with following options.
140+
141+
* Click on **Test this application** in Microsoft Entra admin center. This will redirect to Mosaic Project Operations Sign-on URL where you can initiate the login flow.
142+
143+
* Go to Mosaic Project Operations Sign-on URL directly and initiate the login flow from there.
144+
145+
* You can use Microsoft My Apps. When you click the Mosaic Project Operations tile in the My Apps, this will redirect to Mosaic Project Operations Sign-on URL. For more information about the My Apps, see [Introduction to the My Apps](../user-help/my-apps-portal-end-user-access.md).
146+
147+
## Next Steps
148+
149+
Once you configure Mosaic Project Operations you can enforce session control, which protects exfiltration and infiltration of your organization's sensitive data in real time. Session control extends from Conditional Access. [Learn how to enforce session control with Microsoft Defender for Cloud Apps](/cloud-app-security/proxy-deployment-any-app).

‎articles/active-directory/saas-apps/toc.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1705,6 +1705,8 @@
17051705
href: montageonline-tutorial.md
17061706
- name: Moqups
17071707
href: moqups-tutorial.md
1708+
- name: Mosaic Project Operations
1709+
href: mosaic-project-operations-tutorial.md
17081710
- name: Motus
17091711
href: motus-tutorial.md
17101712
- name: MOVEit Transfer - Microsoft Entra integration

0 commit comments

Comments
 (0)