You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
# Tutorial: Azure Active Directory single sign-on (SSO) integration with Logz.io - Cloud Observability for Engineers
22
+
# Tutorial: Azure Active Directory single sign-on (SSO) integration with Logz.io - Azure AD Integration
23
23
24
-
In this tutorial, you'll learn how to integrate Logz.io - Cloud Observability for Engineers with Azure Active Directory (Azure AD). When you integrate Logz.io - Cloud Observability for Engineers with Azure AD, you can:
24
+
In this tutorial, you'll learn how to integrate Logz.io - Azure AD Integration with Azure Active Directory (Azure AD). When you integrate Logz.io - Azure AD Integration with Azure AD, you can:
25
25
26
-
* Control in Azure AD who has access to Logz.io - Cloud Observability for Engineers.
27
-
* Enable your users to be automatically signed-in to Logz.io - Cloud Observability for Engineers with their Azure AD accounts.
26
+
* Control in Azure AD who has access to Logz.io - Azure AD Integration.
27
+
* Enable your users to be automatically signed-in to Logz.io - Azure AD Integration with their Azure AD accounts.
28
28
* Manage your accounts in one central location - the Azure portal.
29
29
30
30
To learn more about SaaS app integration with Azure AD, see [What is application access and single sign-on with Azure Active Directory](https://docs.microsoft.com/azure/active-directory/manage-apps/what-is-single-sign-on).
@@ -34,44 +34,44 @@ To learn more about SaaS app integration with Azure AD, see [What is application
34
34
To get started, you need the following items:
35
35
36
36
* An Azure AD subscription. If you don't have a subscription, you can get a [free account](https://azure.microsoft.com/free/).
37
-
* Logz.io - Cloud Observability for Engineers single sign-on (SSO) enabled subscription.
37
+
* Logz.io - Azure AD Integration single sign-on (SSO) enabled subscription.
38
38
39
39
## Scenario description
40
40
41
41
In this tutorial, you configure and test Azure AD SSO in a test environment.
* Once you configure Logz.io - Cloud Observability for Engineers you can enforce session control, which protect exfiltration and infiltration of your organization’s sensitive data in real-time. Session control extend from Conditional Access. [Learn how to enforce session control with Microsoft Cloud App Security](https://docs.microsoft.com/cloud-app-security/proxy-deployment-any-app).
43
+
* Logz.io - Azure AD Integration supports **IDP** initiated SSO
44
+
* Once you configure Logz.io - Azure AD Integration you can enforce session control, which protect exfiltration and infiltration of your organization’s sensitive data in real-time. Session control extend from Conditional Access. [Learn how to enforce session control with Microsoft Cloud App Security](https://docs.microsoft.com/cloud-app-security/proxy-deployment-any-app).
45
45
46
-
## Adding Logz.io - Cloud Observability for Engineers from the gallery
46
+
## Adding Logz.io - Azure AD Integration from the gallery
47
47
48
-
To configure the integration of Logz.io - Cloud Observability for Engineers into Azure AD, you need to add Logz.io - Cloud Observability for Engineers from the gallery to your list of managed SaaS apps.
48
+
To configure the integration of Logz.io - Azure AD Integration into Azure AD, you need to add Logz.io - Azure AD Integration from the gallery to your list of managed SaaS apps.
49
49
50
50
1. Sign in to the [Azure portal](https://portal.azure.com) using either a work or school account, or a personal Microsoft account.
51
51
1. On the left navigation pane, select the **Azure Active Directory** service.
52
52
1. Navigate to **Enterprise Applications** and then select **All Applications**.
53
53
1. To add new application, select **New application**.
54
-
1. In the **Add from the gallery** section, type **Logz.io - Cloud Observability for Engineers** in the search box.
55
-
1. Select **Logz.io - Cloud Observability for Engineers** from results panel and then add the app. Wait a few seconds while the app is added to your tenant.
54
+
1. In the **Add from the gallery** section, type **Logz.io - Azure AD Integration** in the search box.
55
+
1. Select **Logz.io - Azure AD Integration** from results panel and then add the app. Wait a few seconds while the app is added to your tenant.
56
56
57
-
## Configure and test Azure AD single sign-on for Logz.io - Cloud Observability for Engineers
57
+
## Configure and test Azure AD single sign-on for Logz.io - Azure AD Integration
58
58
59
-
Configure and test Azure AD SSO with Logz.io - Cloud Observability for Engineers using a test user called **B.Simon**. For SSO to work, you need to establish a link relationship between an Azure AD user and the related user in Logz.io - Cloud Observability for Engineers.
59
+
Configure and test Azure AD SSO with Logz.io - Azure AD Integration using a test user called **B.Simon**. For SSO to work, you need to establish a link relationship between an Azure AD user and the related user in Logz.io - Azure AD Integration.
60
60
61
-
To configure and test Azure AD SSO with Logz.io - Cloud Observability for Engineers, complete the following building blocks:
61
+
To configure and test Azure AD SSO with Logz.io - Azure AD Integration, complete the following building blocks:
62
62
63
63
1.**[Configure Azure AD SSO](#configure-azure-ad-sso)** - to enable your users to use this feature.
64
64
1.**[Create an Azure AD test user](#create-an-azure-ad-test-user)** - to test Azure AD single sign-on with B.Simon.
65
65
1.**[Assign the Azure AD test user](#assign-the-azure-ad-test-user)** - to enable B.Simon to use Azure AD single sign-on.
66
-
1.**[Configure Logz.io Cloud Observability for Engineers SSO](#configure-logzio-cloud-observability-for-engineers-sso)** - to configure the single sign-on settings on application side.
67
-
1.**[Create Logz.io Cloud Observability for Engineers test user](#create-logzio-cloud-observability-for-engineers-test-user)** - to have a counterpart of B.Simon in Logz.io - Cloud Observability for Engineers that is linked to the Azure AD representation of user.
66
+
1.**[Configure Logz.io - Azure AD Integration SSO](#configure-logzio-azure-ad-integration-sso)** - to configure the single sign-on settings on application side.
67
+
1.**[Create Logz.io - Azure AD Integration test user](#create-logzio-azure-ad-integration-test-user)** - to have a counterpart of B.Simon in Logz.io - Azure AD Integration that is linked to the Azure AD representation of user.
68
68
1.**[Test SSO](#test-sso)** - to verify whether the configuration works.
69
69
70
70
## Configure Azure AD SSO
71
71
72
72
Follow these steps to enable Azure AD SSO in the Azure portal.
73
73
74
-
1. In the [Azure portal](https://portal.azure.com/), on the **Logz.io - Cloud Observability for Engineers** application integration page, find the **Manage** section and select **single sign-on**.
74
+
1. In the [Azure portal](https://portal.azure.com/), on the **Logz.io - Azure AD Integration** application integration page, find the **Manage** section and select **single sign-on**.
75
75
1. On the **Select a single sign-on method** page, select **SAML**.
76
76
1. On the **Set up single sign-on with SAML** page, click the edit/pen icon for **Basic SAML Configuration** to edit the settings.
77
77
@@ -86,13 +86,13 @@ Follow these steps to enable Azure AD SSO in the Azure portal.
> These values are not real. Update these values with the actual Identifier and Reply URL. Contact [Logz.io - Cloud Observability for Engineers Client support team](mailto:[email protected]) to get these values. You can also refer to the patterns shown in the **Basic SAML Configuration** section in the Azure portal.
89
+
> These values are not real. Update these values with the actual Identifier and Reply URL. Contact [Logz.io - Azure AD Integration Client support team](mailto:[email protected]) to get these values. You can also refer to the patterns shown in the **Basic SAML Configuration** section in the Azure portal.
90
90
91
-
1. Logz.io - Cloud Observability for Engineers application expects the SAML assertions in a specific format, which requires you to add custom attribute mappings to your SAML token attributes configuration. The following screenshot shows the list of default attributes.
91
+
1. Logz.io - Azure AD Integration application expects the SAML assertions in a specific format, which requires you to add custom attribute mappings to your SAML token attributes configuration. The following screenshot shows the list of default attributes.
92
92
93
93

94
94
95
-
1. In addition to above, Logz.io - Cloud Observability for Engineers application expects few more attributes to be passed back in SAML response which are shown below. These attributes are also pre populated but you can review them as per your requirements.
95
+
1. In addition to above, Logz.io - Azure AD Integration application expects few more attributes to be passed back in SAML response which are shown below. These attributes are also pre populated but you can review them as per your requirements.
96
96
97
97
| Name | Source Attribute|
98
98
| ---------------| --------- |
@@ -104,7 +104,7 @@ Follow these steps to enable Azure AD SSO in the Azure portal.
@@ -122,10 +122,10 @@ In this section, you'll create a test user in the Azure portal called B.Simon.
122
122
123
123
### Assign the Azure AD test user
124
124
125
-
In this section, you'll enable B.Simon to use Azure single sign-on by granting access to Logz.io - Cloud Observability for Engineers.
125
+
In this section, you'll enable B.Simon to use Azure single sign-on by granting access to Logz.io - Azure AD Integration.
126
126
127
127
1. In the Azure portal, select **Enterprise Applications**, and then select **All applications**.
128
-
1. In the applications list, select **Logz.io - Cloud Observability for Engineers**.
128
+
1. In the applications list, select **Logz.io - Azure AD Integration**.
129
129
1. In the app's overview page, find the **Manage** section and select **Users and groups**.
130
130
131
131

@@ -138,19 +138,19 @@ In this section, you'll enable B.Simon to use Azure single sign-on by granting a
138
138
1. If you're expecting any role value in the SAML assertion, in the **Select Role** dialog, select the appropriate role for the user from the list and then click the **Select** button at the bottom of the screen.
139
139
1. In the **Add Assignment** dialog, click the **Assign** button.
140
140
141
-
## Configure Logz.io Cloud Observability for Engineers SSO
141
+
## Configure Logz.io Azure AD Integration SSO
142
142
143
-
To configure single sign-on on **Logz.io - Cloud Observability for Engineers** side, you need to send the downloaded **Certificate (Base64)** and appropriate copied URLs from Azure portal to [Logz.io - Cloud Observability for Engineers support team](mailto:[email protected]). They set this setting to have the SAML SSO connection set properly on both sides.
143
+
To configure single sign-on on **Logz.io - Azure AD Integration** side, you need to send the downloaded **Certificate (Base64)** and appropriate copied URLs from Azure portal to [Logz.io - Azure AD Integration support team](mailto:[email protected]). They set this setting to have the SAML SSO connection set properly on both sides.
144
144
145
-
### Create Logz.io Cloud Observability for Engineers test user
145
+
### Create Logz.io Azure AD Integration test user
146
146
147
-
In this section, you create a user called Britta Simon in Logz.io - Cloud Observability for Engineers. Work with [Logz.io - Cloud Observability for Engineers support team](mailto:[email protected]) to add the users in the Logz.io - Cloud Observability for Engineers platform. Users must be created and activated before you use single sign-on.
147
+
In this section, you create a user called Britta Simon in Logz.io - Azure AD Integration. Work with [Logz.io - Azure AD Integration support team](mailto:[email protected]) to add the users in the Logz.io - Azure AD Integration platform. Users must be created and activated before you use single sign-on.
148
148
149
149
## Test SSO
150
150
151
151
In this section, you test your Azure AD single sign-on configuration using the Access Panel.
152
152
153
-
When you click the Logz.io - Cloud Observability for Engineers tile in the Access Panel, you should be automatically signed in to the Logz.io - Cloud Observability for Engineers for which you set up SSO. For more information about the Access Panel, see [Introduction to the Access Panel](https://docs.microsoft.com/azure/active-directory/active-directory-saas-access-panel-introduction).
153
+
When you click the Logz.io - Azure AD Integration tile in the Access Panel, you should be automatically signed in to the Logz.io - Azure AD Integration for which you set up SSO. For more information about the Access Panel, see [Introduction to the Access Panel](https://docs.microsoft.com/azure/active-directory/active-directory-saas-access-panel-introduction).
154
154
155
155
## Additional resources
156
156
@@ -160,9 +160,9 @@ When you click the Logz.io - Cloud Observability for Engineers tile in the Acces
160
160
161
161
-[What is conditional access in Azure Active Directory?](https://docs.microsoft.com/azure/active-directory/conditional-access/overview)
162
162
163
-
-[Try Logz.io - Cloud Observability for Engineers with Azure AD](https://aad.portal.azure.com/)
163
+
-[Try Logz.io - Azure AD Integration with Azure AD](https://aad.portal.azure.com/)
164
164
165
165
-[What is session control in Microsoft Cloud App Security?](https://docs.microsoft.com/cloud-app-security/proxy-intro-aad)
166
166
167
-
-[How to protect Logz.io - Cloud Observability for Engineers with advanced visibility and controls](https://docs.microsoft.com/cloud-app-security/proxy-intro-aad)
167
+
-[How to protect Logz.io - Azure AD Integration with advanced visibility and controls](https://docs.microsoft.com/cloud-app-security/proxy-intro-aad)
0 commit comments