Merge pull request #92956 from v-viinde/iqnavigatorupdate

Product Backlog Item 837750: SaaS App Tutorial: IQNavigator VMS update

Author: megvanhuygen

articles/active-directory/saas-apps/iqnavigatorvms-tutorial.md

@@ -1,5 +1,5 @@
 ---
-title: 'Tutorial: Azure Active Directory integration with IQNavigator VMS | Microsoft Docs'
+title: 'Tutorial: Azure Active Directory single sign-on (SSO) integration with IQNavigator VMS | Microsoft Docs'
 description: Learn how to configure single sign-on between Azure Active Directory and IQNavigator VMS.
 services: active-directory
 documentationCenter: na
@@ -14,92 +14,77 @@ ms.workload: identity
 ms.tgt_pltfrm: na
 ms.devlang: na
 ms.topic: tutorial
-ms.date: 03/19/2019
+ms.date: 10/23/2019
 ms.author: jeedes
 
+ms.collection: M365-identity-device-management
 ---
-# Tutorial: Azure Active Directory integration with IQNavigator VMS
 
-In this tutorial, you learn how to integrate IQNavigator VMS with Azure Active Directory (Azure AD).
-Integrating IQNavigator VMS with Azure AD provides you with the following benefits:
+# Tutorial: Azure Active Directory single sign-on (SSO) integration with IQNavigator VMS
 
-* You can control in Azure AD who has access to IQNavigator VMS.
-* You can enable your users to be automatically signed-in to IQNavigator VMS (Single Sign-On) with their Azure AD accounts.
-* You can manage your accounts in one central location - the Azure portal.
+In this tutorial, you'll learn how to integrate IQNavigator VMS with Azure Active Directory (Azure AD). When you integrate IQNavigator VMS with Azure AD, you can:
 
-If you want to know more details about SaaS app integration with Azure AD, see [What is application access and single sign-on with Azure Active Directory](https://docs.microsoft.com/azure/active-directory/active-directory-appssoaccess-whatis).
-If you don't have an Azure subscription, [create a free account](https://azure.microsoft.com/free/) before you begin.
+* Control in Azure AD who has access to IQNavigator VMS.
+* Enable your users to be automatically signed-in to IQNavigator VMS with their Azure AD accounts.
+* Manage your accounts in one central location - the Azure portal.
+
+To learn more about SaaS app integration with Azure AD, see [What is application access and single sign-on with Azure Active Directory](https://docs.microsoft.com/azure/active-directory/active-directory-appssoaccess-whatis).
 
 ## Prerequisites
 
-To configure Azure AD integration with IQNavigator VMS, you need the following items:
+To get started, you need the following items:
 
-* An Azure AD subscription. If you don't have an Azure AD environment, you can get one-month trial [here](https://azure.microsoft.com/pricing/free-trial/)
-* IQNavigator VMS single sign-on enabled subscription
+* An Azure AD subscription. If you don't have a subscription, you can get a [free account](https://azure.microsoft.com/free/).
+* IQNavigator VMS single sign-on (SSO) enabled subscription.
 
 ## Scenario description
 
-In this tutorial, you configure and test Azure AD single sign-on in a test environment.
-
-* IQNavigator VMS supports **IDP** initiated SSO
-
-## Adding IQNavigator VMS from the gallery
-
-To configure the integration of IQNavigator VMS into Azure AD, you need to add IQNavigator VMS from the gallery to your list of managed SaaS apps.
-
-**To add IQNavigator VMS from the gallery, perform the following steps:**
-
-1. In the **[Azure portal](https://portal.azure.com)**, on the left navigation panel, click **Azure Active Directory** icon.
+In this tutorial, you configure and test Azure AD SSO in a test environment.
 
-	![The Azure Active Directory button](common/select-azuread.png)
 
-2. Navigate to **Enterprise Applications** and then select the **All Applications** option.
-
-	![The Enterprise applications blade](common/enterprise-applications.png)
-
-3. To add new application, click **New application** button on the top of dialog.
-
-	![The New application button](common/add-new-app.png)
-
-4. In the search box, type **IQNavigator VMS**, select **IQNavigator VMS** from result panel then click **Add** button to add the application.
+* IQNavigator VMS supports **IDP** initiated SSO
 
-	 ![IQNavigator VMS in the results list](common/search-new-app.png)
+> [!NOTE]
+> Identifier of this application is a fixed string value so only one instance can be configured in one tenant.
 
-## Configure and test Azure AD single sign-on
 
-In this section, you configure and test Azure AD single sign-on with IQNavigator VMS based on a test user called **Britta Simon**.
-For single sign-on to work, a link relationship between an Azure AD user and the related user in IQNavigator VMS needs to be established.
 
-To configure and test Azure AD single sign-on with IQNavigator VMS, you need to complete the following building blocks:
+## Adding IQNavigator VMS from the gallery
 
-1. **[Configure Azure AD Single Sign-On](#configure-azure-ad-single-sign-on)** - to enable your users to use this feature.
-2. **[Configure IQNavigator VMS Single Sign-On](#configure-iqnavigator-vms-single-sign-on)** - to configure the Single Sign-On settings on application side.
-3. **[Create an Azure AD test user](#create-an-azure-ad-test-user)** - to test Azure AD single sign-on with Britta Simon.
-4. **[Assign the Azure AD test user](#assign-the-azure-ad-test-user)** - to enable Britta Simon to use Azure AD single sign-on.
-5. **[Create IQNavigator VMS test user](#create-iqnavigator-vms-test-user)** - to have a counterpart of Britta Simon in IQNavigator VMS that is linked to the Azure AD representation of user.
-6. **[Test single sign-on](#test-single-sign-on)** - to verify whether the configuration works.
+To configure the integration of IQNavigator VMS into Azure AD, you need to add IQNavigator VMS from the gallery to your list of managed SaaS apps.
 
-### Configure Azure AD single sign-on
+1. Sign in to the [Azure portal](https://portal.azure.com) using either a work or school account, or a personal Microsoft account.
+1. On the left navigation pane, select the **Azure Active Directory** service.
+1. Navigate to **Enterprise Applications** and then select **All Applications**.
+1. To add new application, select **New application**.
+1. In the **Add from the gallery** section, type **IQNavigator VMS** in the search box.
+1. Select **IQNavigator VMS** from results panel and then add the app. Wait a few seconds while the app is added to your tenant.
 
-In this section, you enable Azure AD single sign-on in the Azure portal.
 
-To configure Azure AD single sign-on with IQNavigator VMS, perform the following steps:
+## Configure and test Azure AD single sign-on for IQNavigator VMS
 
-1. In the [Azure portal](https://portal.azure.com/), on the **IQNavigator VMS** application integration page, select **Single sign-on**.
+Configure and test Azure AD SSO with IQNavigator VMS using a test user called **B.Simon**. For SSO to work, you need to establish a link relationship between an Azure AD user and the related user in IQNavigator VMS.
 
-    ![Configure single sign-on link](common/select-sso.png)
+To configure and test Azure AD SSO with IQNavigator VMS, complete the following building blocks:
 
-2. On the **Select a Single sign-on method** dialog, select **SAML/WS-Fed** mode to enable single sign-on.
+1. **[Configure Azure AD SSO](#configure-azure-ad-sso)** - to enable your users to use this feature.
+    1. **[Create an Azure AD test user](#create-an-azure-ad-test-user)** - to test Azure AD single sign-on with B.Simon.
+    1. **[Assign the Azure AD test user](#assign-the-azure-ad-test-user)** - to enable B.Simon to use Azure AD single sign-on.
+1. **[Configure IQNavigator VMS SSO](#configure-iqnavigator-vms-sso)** - to configure the single sign-on settings on application side.
+    1. **[Create IQNavigator VMS test user](#create-iqnavigator-vms-test-user)** - to have a counterpart of B.Simon in IQNavigator VMS that is linked to the Azure AD representation of user.
+1. **[Test SSO](#test-sso)** - to verify whether the configuration works.
 
-    ![Single sign-on select mode](common/select-saml-option.png)
+## Configure Azure AD SSO
 
-3. On the **Set up Single Sign-On with SAML** page, click **Edit** icon to open **Basic SAML Configuration** dialog.
+Follow these steps to enable Azure AD SSO in the Azure portal.
 
-	![Edit Basic SAML Configuration](common/edit-urls.png)
+1. In the [Azure portal](https://portal.azure.com/), on the **IQNavigator VMS** application integration page, find the **Manage** section and select **single sign-on**.
+1. On the **Select a single sign-on method** page, select **SAML**.
+1. On the **Set up single sign-on with SAML** page, click the edit/pen icon for **Basic SAML Configuration** to edit the settings.
 
-4. On the **Basic SAML Configuration** section, perform the following steps:
+   ![Edit Basic SAML Configuration](common/edit-urls.png)
 
-    ![IQNavigator VMS Domain and URLs single sign-on information](common/idp-relay.png)
+1. On the **Basic SAML Configuration** section, enter the values for the following fields:
 
     a. In the **Identifier** text box, type a URL:
     `iqn.com`
@@ -115,83 +100,65 @@ To configure Azure AD single sign-on with IQNavigator VMS, perform the following
 	> [!NOTE]
 	> These values are not real. Update these values with the actual Reply URL and Relay State. Contact [IQNavigator VMS Client support team](https://www.beeline.com/support-iqn/) to get these values. You can also refer to the patterns shown in the **Basic SAML Configuration** section in the Azure portal.
 
-5. IQNavigator application expect the unique user identifier value in the Name Identifier claim. Customer can map the correct value for the Name Identifier claim. In this case we have mapped the user.UserPrincipalName for the demo purpose. But according to your organization settings you should map the correct value for it.
+1. IQNavigator application expect the Unique User Identifier value in the Name Identifier claim. Customer can map the correct value for the Name Identifier claim. In this case we have mapped the user.UserPrincipalName for the demo purpose. But according to your organization settings you should map the correct value for it.
 
 	![image](common/edit-attribute.png)
 
-6. On the **Set up Single Sign-On with SAML** page, In the **SAML Signing Certificate** section, click copy button to copy **App Federation Metadata Url** and save it on your computer.
+1. On the **Set up single sign-on with SAML** page, In the **SAML Signing Certificate** section, click copy button to copy **App Federation Metadata Url** and save it on your computer.
 
 	![The Certificate download link](common/copy-metadataurl.png)
 
-### Configure IQNavigator VMS Single Sign-On
-
-To configure single sign-on on **IQNavigator VMS** side, you need to send the **App Federation Metadata Url** to [IQNavigator VMS support team](https://www.beeline.com/support-iqn/). They set this setting to have the SAML SSO connection set properly on both sides.
-
 ### Create an Azure AD test user
 
-The objective of this section is to create a test user in the Azure portal called Britta Simon.
-
-1. In the Azure portal, in the left pane, select **Azure Active Directory**, select **Users**, and then select **All users**.
-
-    ![The "Users and groups" and "All users" links](common/users.png)
-
-2. Select **New user** at the top of the screen.
-
-    ![New user Button](common/new-user.png)
-
-3. In the User properties, perform the following steps.
-
-    ![The User dialog box](common/user-properties.png)
-
-    a. In the **Name** field enter **BrittaSimon**.
-  
-    b. In the **User name** field type **[email protected]**  
-    For example, [email protected]
+In this section, you'll create a test user in the Azure portal called B.Simon.
 
-    c. Select **Show password** check box, and then write down the value that's displayed in the Password box.
-
-    d. Click **Create**.
+1. From the left pane in the Azure portal, select **Azure Active Directory**, select **Users**, and then select **All users**.
+1. Select **New user** at the top of the screen.
+1. In the **User** properties, follow these steps:
+   1. In the **Name** field, enter `B.Simon`.  
+   1. In the **User name** field, enter the [email protected]. For example, `[email protected]`.
+   1. Select the **Show password** check box, and then write down the value that's displayed in the **Password** box.
+   1. Click **Create**.
 
 ### Assign the Azure AD test user
 
-In this section, you enable Britta Simon to use Azure single sign-on by granting access to IQNavigator VMS.
-
-1. In the Azure portal, select **Enterprise Applications**, select **All applications**, then select **IQNavigator VMS**.
-
-	![Enterprise applications blade](common/enterprise-applications.png)
-
-2. In the applications list, select **IQNavigator VMS**.
+In this section, you'll enable B.Simon to use Azure single sign-on by granting access to IQNavigator VMS.
 
-	![The IQNavigator VMS link in the Applications list](common/all-applications.png)
+1. In the Azure portal, select **Enterprise Applications**, and then select **All applications**.
+1. In the applications list, select **IQNavigator VMS**.
+1. In the app's overview page, find the **Manage** section and select **Users and groups**.
 
-3. In the menu on the left, select **Users and groups**.
+   ![The "Users and groups" link](common/users-groups-blade.png)
 
-    ![The "Users and groups" link](common/users-groups-blade.png)
+1. Select **Add user**, then select **Users and groups** in the **Add Assignment** dialog.
 
-4. Click the **Add user** button, then select **Users and groups** in the **Add Assignment** dialog.
+	![The Add User link](common/add-assign-user.png)
 
-    ![The Add Assignment pane](common/add-assign-user.png)
+1. In the **Users and groups** dialog, select **B.Simon** from the Users list, then click the **Select** button at the bottom of the screen.
+1. If you're expecting any role value in the SAML assertion, in the **Select Role** dialog, select the appropriate role for the user from the list and then click the **Select** button at the bottom of the screen.
+1. In the **Add Assignment** dialog, click the **Assign** button.
 
-5. In the **Users and groups** dialog select **Britta Simon** in the Users list, then click the **Select** button at the bottom of the screen.
+## Configure IQNavigator VMS SSO
 
-6. If you are expecting any role value in the SAML assertion then in the **Select Role** dialog select the appropriate role for the user from the list, then click the **Select** button at the bottom of the screen.
-
-7. In the **Add Assignment** dialog click the **Assign** button.
+To configure single sign-on on **IQNavigator VMS** side, you need to send the **App Federation Metadata Url** to [IQNavigator VMS support team](https://www.beeline.com/support-iqn/). They set this setting to have the SAML SSO connection set properly on both sides.
 
 ### Create IQNavigator VMS test user
 
 In this section, you create a user called Britta Simon in IQNavigator VMS. Work with [IQNavigator VMS support team](https://www.beeline.com/support-iqn/) to add the users in the IQNavigator VMS platform. Users must be created and activated before you use single sign-on.
 
-### Test single sign-on
+## Test SSO 
 
 In this section, you test your Azure AD single sign-on configuration using the Access Panel.
 
 When you click the IQNavigator VMS tile in the Access Panel, you should be automatically signed in to the IQNavigator VMS for which you set up SSO. For more information about the Access Panel, see [Introduction to the Access Panel](https://docs.microsoft.com/azure/active-directory/active-directory-saas-access-panel-introduction).
 
-## Additional Resources
+## Additional resources
+
+- [ List of Tutorials on How to Integrate SaaS Apps with Azure Active Directory ](https://docs.microsoft.com/azure/active-directory/active-directory-saas-tutorial-list)
+
+- [What is application access and single sign-on with Azure Active Directory? ](https://docs.microsoft.com/azure/active-directory/active-directory-appssoaccess-whatis)
 
-- [List of Tutorials on How to Integrate SaaS Apps with Azure Active Directory](https://docs.microsoft.com/azure/active-directory/active-directory-saas-tutorial-list)
+- [What is conditional access in Azure Active Directory?](https://docs.microsoft.com/azure/active-directory/conditional-access/overview)
 
-- [What is application access and single sign-on with Azure Active Directory?](https://docs.microsoft.com/azure/active-directory/active-directory-appssoaccess-whatis)
+- [Try IQNavigator VMS with Azure AD](https://aad.portal.azure.com/)
 
-- [What is Conditional Access in Azure Active Directory?](https://docs.microsoft.com/azure/active-directory/conditional-access/overview)