Merge pull request #254607 from Harshita-130901/CIC

Product Backlog Item 2718104: SaaS App Tutorial: CIC - Controle Intel…

Author: v-ccolin

articles/active-directory/saas-apps/cic-intelligent-compensation-control-tutorial.md

@@ -0,0 +1,141 @@
+---
+title: Microsoft Entra SSO integration with CIC - Controle Inteligente de Compensação
+description: Learn how to configure single sign-on between Microsoft Entra ID and CIC - Controle Inteligente de Compensação.
+services: active-directory
+author: jeevansd
+manager: CelesteDG
+ms.reviewer: CelesteDG
+ms.service: active-directory
+ms.subservice: saas-app-tutorial
+ms.workload: identity
+ms.topic: how-to
+ms.date: 10/10/2023
+ms.author: jeedes
+
+---
+
+# Microsoft Entra SSO integration with CIC - Controle Inteligente de Compensação
+
+In this tutorial, you'll learn how to integrate CIC - Controle Inteligente de Compensação with Microsoft Entra ID. When you integrate CIC - Controle Inteligente de Compensação with Microsoft Entra ID, you can:
+
+* Control in Microsoft Entra ID who has access to CIC - Controle Inteligente de Compensação.
+* Enable your users to be automatically signed-in to CIC - Controle Inteligente de Compensação with their Microsoft Entra accounts.
+* Manage your accounts in one central location.
+
+## Prerequisites
+
+To integrate Microsoft Entra ID with CIC - Controle Inteligente de Compensação, you need:
+
+* A Microsoft Entra subscription. If you don't have a subscription, you can get a [free account](https://azure.microsoft.com/free/).
+* CIC - Controle Inteligente de Compensação single sign-on (SSO) enabled subscription.
+
+## Scenario description
+
+In this tutorial, you configure and test Microsoft Entra SSO in a test environment.
+
+* CIC - Controle Inteligente de Compensação supports **SP** initiated SSO.
+
+> [!NOTE]
+> Identifier of this application is a fixed string value so only one instance can be configured in one tenant.
+
+## Add CIC - Controle Inteligente de Compensação from the gallery
+
+To configure the integration of CIC - Controle Inteligente de Compensação into Microsoft Entra ID, you need to add CIC - Controle Inteligente de Compensação from the gallery to your list of managed SaaS apps.
+
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Cloud Application Administrator](../roles/permissions-reference.md#cloud-application-administrator).
+1. Browse to **Identity** > **Applications** > **Enterprise applications** > **New application**.
+1. In the **Add from the gallery** section, type **CIC - Controle Inteligente de Compensação** in the search box.
+1. Select **CIC - Controle Inteligente de Compensação** from results panel and then add the app. Wait a few seconds while the app is added to your tenant.
+
+Alternatively, you can also use the [Enterprise App Configuration Wizard](https://portal.office.com/AdminPortal/home?Q=Docs#/azureadappintegration). In this wizard, you can add an application to your tenant, add users/groups to the app, assign roles, and walk through the SSO configuration as well. [Learn more about Microsoft 365 wizards.](/microsoft-365/admin/misc/azure-ad-setup-guides)
+
+## Configure and test Microsoft Entra SSO for CIC - Controle Inteligente de Compensação
+
+Configure and test Microsoft Entra SSO with CIC - Controle Inteligente de Compensação using a test user called **B.Simon**. For SSO to work, you need to establish a link relationship between a Microsoft Entra user and the related user in CIC - Controle Inteligente de Compensação.
+
+To configure and test Microsoft Entra SSO with CIC - Controle Inteligente de Compensação, perform the following steps:
+
+1. **[Configure Microsoft Entra SSO](#configure-microsoft-entra-sso)** - to enable your users to use this feature.
+    1. **[Create a Microsoft Entra ID test user](#create-a-microsoft-entra-id-test-user)** - to test Microsoft Entra single sign-on with B.Simon.
+    1. **[Assign the Microsoft Entra ID test user](#assign-the-microsoft-entra-id-test-user)** - to enable B.Simon to use Microsoft Entra single sign-on.
+1. **[Configure CIC - Controle Inteligente de Compensação SSO](#configure-cic---controle-inteligente-de-compensação-sso)** - to configure the single sign-on settings on application side.
+    1. **[Create CIC - Controle Inteligente de Compensação test user](#create-cic---controle-inteligente-de-compensação-test-user)** - to have a counterpart of B.Simon in CIC - Controle Inteligente de Compensação that is linked to the Microsoft Entra ID representation of user.
+1. **[Test SSO](#test-sso)** - to verify whether the configuration works.
+
+## Configure Microsoft Entra SSO
+
+Follow these steps to enable Microsoft Entra SSO in the Microsoft Entra admin center.
+
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Cloud Application Administrator](../roles/permissions-reference.md#cloud-application-administrator).
+1. Browse to **Identity** > **Applications** > **Enterprise applications** > **CIC - Controle Inteligente de Compensação** > **Single sign-on**.
+1. On the **Select a single sign-on method** page, select **SAML**.
+1. On the **Set up single sign-on with SAML** page, click the pencil icon for **Basic SAML Configuration** to edit the settings.
+
+   ![Screenshot shows how to edit Basic SAML Configuration.](common/edit-urls.png "Basic Configuration")
+
+1. On the **Basic SAML Configuration** section, perform the following steps:
+
+    a. In the **Identifier (Entity ID)** text box, type the value:
+    `cic-prod`
+
+    b. In the **Reply URL** text box, type the URL:
+    `https://prodgtw.perdcomp.com.br/auth/login/saml/callback`
+
+    c. In the **Sign on URL** text box, type the URL:
+    `https://perdcomp.com.br/`
+
+1. On the **Set up single sign-on with SAML** page, in the **SAML Signing Certificate** section, find **Federation Metadata XML** and select **Download** to download the certificate and save it on your computer.
+
+	![Screenshot shows the Certificate download link.](common/metadataxml.png "Certificate")
+
+1. On the **Set up CIC - Controle Inteligente de Compensação** section, copy the appropriate URL(s) based on your requirement.
+
+	![Screenshot shows to copy configuration URLs.](common/copy-configuration-urls.png "Metadata")
+
+### Create a Microsoft Entra ID test user
+
+In this section, you'll create a test user in the Microsoft Entra admin center called B.Simon.
+
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [User Administrator](../roles/permissions-reference.md#user-administrator).
+1. Browse to **Identity** > **Users** > **All users**.
+1. Select **New user** > **Create new user**, at the top of the screen.
+1. In the **User** properties, follow these steps:
+   1. In the **Display name** field, enter `B.Simon`.  
+   1. In the **User principal name** field, enter the [email protected]. For example, `[email protected]`.
+   1. Select the **Show password** check box, and then write down the value that's displayed in the **Password** box.
+   1. Select **Review + create**.
+1. Select **Create**.
+
+### Assign the Microsoft Entra ID test user
+
+In this section, you'll enable B.Simon to use Microsoft Entra single sign-on by granting access to CIC - Controle Inteligente de Compensação.
+
+1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Cloud Application Administrator](../roles/permissions-reference.md#cloud-application-administrator).
+1. Browse to **Identity** > **Applications** > **Enterprise applications** > **CIC - Controle Inteligente de Compensação**.
+1. In the app's overview page, select **Users and groups**.
+1. Select **Add user/group**, then select **Users and groups** in the **Add Assignment** dialog.
+   1. In the **Users and groups** dialog, select **B.Simon** from the Users list, then click the **Select** button at the bottom of the screen.
+   1. If you are expecting a role to be assigned to the users, you can select it from the **Select a role** dropdown. If no role has been set up for this app, you see "Default Access" role selected.
+   1. In the **Add Assignment** dialog, click the **Assign** button.
+
+## Configure CIC - Controle Inteligente de Compensação SSO
+
+To configure single sign-on on **CIC - Controle Inteligente de Compensação** side, you need to send the downloaded **Federation Metadata XML** and appropriate copied URLs from Microsoft Entra admin center to [CIC - Controle Inteligente de Compensação support team](mailto:[email protected]). They set this setting to have the SAML SSO connection set properly on both sides.
+
+### Create CIC - Controle Inteligente de Compensação test user
+
+In this section, you create a user called B.Simon in CIC - Controle Inteligente de Compensação. Work with [CIC - Controle Inteligente de Compensação support team](mailto:[email protected]) to add the users in the CIC - Controle Inteligente de Compensação platform. Users must be created and activated before you use single sign-on.
+
+## Test SSO 
+
+In this section, you test your Microsoft Entra single sign-on configuration with following options.
+ 
+* Click on **Test this application** in Microsoft Entra admin center. This will redirect to CIC - Controle Inteligente de Compensação Sign-on URL where you can initiate the login flow.
+ 
+* Go to CIC - Controle Inteligente de Compensação Sign-on URL directly and initiate the login flow from there.
+ 
+* You can use Microsoft My Apps. When you click the CIC - Controle Inteligente de Compensação tile in the My Apps, this will redirect to CIC - Controle Inteligente de Compensação Sign-on URL. For more information about the My Apps, see [Introduction to the My Apps](../user-help/my-apps-portal-end-user-access.md).
+
+## Next steps
+
+Once you configure CIC - Controle Inteligente de Compensação you can enforce session control, which protects exfiltration and infiltration of your organization's sensitive data in real time. Session control extends from Conditional Access. [Learn how to enforce session control with Microsoft Defender for Cloud Apps](/cloud-app-security/proxy-deployment-any-app).

articles/active-directory/saas-apps/toc.yml

@@ -474,6 +474,8 @@
         href: chronicx-tutorial.md
       - name: Chronus SAML
         href: chronus-saml-tutorial.md
+      - name: CIC - Controle Inteligente de Compensação
+        href: cic-intelligent-compensation-control-tutorial.md
       - name: Cimpl
         href: cimpl-tutorial.md
       - name: Circus Street