SaaS App Tutorial: TutorialtoUpdate152

Author: bhavana-129

articles/active-directory/saas-apps/media/skysite-tutorial/certificate.png

@@ -1,5 +1,5 @@
 ---
-title: 'Tutorial: Azure Active Directory single sign-on (SSO) integration with ShipHazmat | Microsoft Docs'
+title: 'Tutorial: Azure AD SSO integration with ShipHazmat'
 description: Learn how to configure single sign-on between Azure Active Directory and ShipHazmat.
 services: active-directory
 author: jeevansd
@@ -9,20 +9,18 @@ ms.service: active-directory
 ms.subservice: saas-app-tutorial
 ms.workload: identity
 ms.topic: tutorial
-ms.date: 02/24/2020
+ms.date: 02/22/2022
 ms.author: jeedes
 ---
 
-# Tutorial: Azure Active Directory single sign-on (SSO) integration with ShipHazmat
+# Tutorial: Azure AD SSO integration with ShipHazmat
 
 In this tutorial, you'll learn how to integrate ShipHazmat with Azure Active Directory (Azure AD). When you integrate ShipHazmat with Azure AD, you can:
 
 * Control in Azure AD who has access to ShipHazmat.
 * Enable your users to be automatically signed-in to ShipHazmat with their Azure AD accounts.
 * Manage your accounts in one central location - the Azure portal.
 
-To learn more about SaaS app integration with Azure AD, see [What is application access and single sign-on with Azure Active Directory](../manage-apps/what-is-single-sign-on.md).
-
 ## Prerequisites
 
 To get started, you need the following items:
@@ -34,49 +32,46 @@ To get started, you need the following items:
 
 In this tutorial, you configure and test Azure AD SSO in a test environment.
 
-* ShipHazmat supports **IDP** initiated SSO
-* ShipHazmat supports **Just In Time** user provisioning
-* Once you configure ShipHazmat you can enforce session control, which protects exfiltration and infiltration of your organization's sensitive data in real time. Session control extends from Conditional Access. [Learn how to enforce session control with Microsoft Defender for Cloud Apps](/cloud-app-security/proxy-deployment-any-app).
-
+* ShipHazmat supports **IDP** initiated SSO.
+* ShipHazmat supports **Just In Time** user provisioning.
 
-## Adding ShipHazmat from the gallery
+## Add ShipHazmat from the gallery
 
 To configure the integration of ShipHazmat into Azure AD, you need to add ShipHazmat from the gallery to your list of managed SaaS apps.
 
-1. Sign in to the [Azure portal](https://portal.azure.com) using either a work or school account, or a personal Microsoft account.
+1. Sign in to the Azure portal using either a work or school account, or a personal Microsoft account.
 1. On the left navigation pane, select the **Azure Active Directory** service.
 1. Navigate to **Enterprise Applications** and then select **All Applications**.
 1. To add new application, select **New application**.
 1. In the **Add from the gallery** section, type **ShipHazmat** in the search box.
 1. Select **ShipHazmat** from results panel and then add the app. Wait a few seconds while the app is added to your tenant.
 
-
-## Configure and test Azure AD single sign-on for ShipHazmat
+## Configure and test Azure AD SSO for ShipHazmat
 
 Configure and test Azure AD SSO with ShipHazmat using a test user called **B.Simon**. For SSO to work, you need to establish a link relationship between an Azure AD user and the related user in ShipHazmat.
 
-To configure and test Azure AD SSO with ShipHazmat, complete the following building blocks:
+To configure and test Azure AD SSO with ShipHazmat, perform the following steps:
 
 1. **[Configure Azure AD SSO](#configure-azure-ad-sso)** - to enable your users to use this feature.
-    * **[Create an Azure AD test user](#create-an-azure-ad-test-user)** - to test Azure AD single sign-on with B.Simon.
-    * **[Assign the Azure AD test user](#assign-the-azure-ad-test-user)** - to enable B.Simon to use Azure AD single sign-on.
+    1. **[Create an Azure AD test user](#create-an-azure-ad-test-user)** - to test Azure AD single sign-on with B.Simon.
+    1. **[Assign the Azure AD test user](#assign-the-azure-ad-test-user)** - to enable B.Simon to use Azure AD single sign-on.
 1. **[Configure ShipHazmat SSO](#configure-shiphazmat-sso)** - to configure the single sign-on settings on application side.
-    * **[Create ShipHazmat test user](#create-shiphazmat-test-user)** - to have a counterpart of B.Simon in ShipHazmat that is linked to the Azure AD representation of user.
+    1. **[Create ShipHazmat test user](#create-shiphazmat-test-user)** - to have a counterpart of B.Simon in ShipHazmat that is linked to the Azure AD representation of user.
 1. **[Test SSO](#test-sso)** - to verify whether the configuration works.
 
 ## Configure Azure AD SSO
 
 Follow these steps to enable Azure AD SSO in the Azure portal.
 
-1. In the [Azure portal](https://portal.azure.com/), on the **ShipHazmat** application integration page, find the **Manage** section and select **single sign-on**.
+1. In the Azure portal, on the **ShipHazmat** application integration page, find the **Manage** section and select **single sign-on**.
 1. On the **Select a single sign-on method** page, select **SAML**.
-1. On the **Set up single sign-on with SAML** page, click the edit/pen icon for **Basic SAML Configuration** to edit the settings.
+1. On the **Set up single sign-on with SAML** page, click the pencil icon for **Basic SAML Configuration** to edit the settings.
 
    ![Edit Basic SAML Configuration](common/edit-urls.png)
 
-1. On the **Set up single sign-on with SAML** page, enter the values for the following fields:
+1. On the **Basic SAML Configuration** section, perform the following steps:
 
-    a. In the **Identifier** text box, type a URL using the following pattern:
+    a. In the **Identifier** text box, type a value using the following pattern:
     `ShipHazmat<CustomOrganization>Sso`
 
     b. In the **Reply URL** text box, type a URL using the following pattern:
@@ -119,13 +114,7 @@ In this section, you'll enable B.Simon to use Azure single sign-on by granting a
 1. In the Azure portal, select **Enterprise Applications**, and then select **All applications**.
 1. In the applications list, select **ShipHazmat**.
 1. In the app's overview page, find the **Manage** section and select **Users and groups**.
-
-   ![The "Users and groups" link](common/users-groups-blade.png)
-
 1. Select **Add user**, then select **Users and groups** in the **Add Assignment** dialog.
-
-    ![The Add User link](common/add-assign-user.png)
-
 1. In the **Users and groups** dialog, select **B.Simon** from the Users list, then click the **Select** button at the bottom of the screen.
 1. If you're expecting any role value in the SAML assertion, in the **Select Role** dialog, select the appropriate role for the user from the list and then click the **Select** button at the bottom of the screen.
 1. In the **Add Assignment** dialog, click the **Assign** button.
@@ -140,18 +129,12 @@ In this section, a user called B.Simon is created in ShipHazmat. ShipHazmat supp
 
 ## Test SSO
 
-In this section, you test your Azure AD single sign-on configuration using the Access Panel.
-
-When you click the ShipHazmat tile in the Access Panel, you should be automatically signed in to the ShipHazmat for which you set up SSO. For more information about the Access Panel, see [Introduction to the Access Panel](https://support.microsoft.com/account-billing/sign-in-and-start-apps-from-the-my-apps-portal-2f3b1bae-0e5a-4a86-a33e-876fbd2a4510).
-
-## Additional resources
-
-- [ List of Tutorials on How to Integrate SaaS Apps with Azure Active Directory ](./tutorial-list.md)
+In this section, you test your Azure AD single sign-on configuration with following options.
 
-- [What is application access and single sign-on with Azure Active Directory? ](../manage-apps/what-is-single-sign-on.md)
+* Click on Test this application in Azure portal and you should be automatically signed in to the ShipHazmat for which you set up the SSO.
 
-- [What is conditional access in Azure Active Directory?](../conditional-access/overview.md)
+* You can use Microsoft My Apps. When you click the ShipHazmat tile in the My Apps, you should be automatically signed in to the ShipHazmat for which you set up the SSO. For more information about the My Apps, see [Introduction to the My Apps](../user-help/my-apps-portal-end-user-access.md).
 
-- [Try ShipHazmat with Azure AD](https://aad.portal.azure.com/)
+## Next steps
 
-- [What is session control in Microsoft Defender for Cloud Apps?](/cloud-app-security/proxy-intro-aad)
+Once you configure ShipHazmat you can enforce session control, which protects exfiltration and infiltration of your organization’s sensitive data in real time. Session control extends from Conditional Access. [Learn how to enforce session control with Microsoft Cloud App Security](/cloud-app-security/proxy-deployment-aad).

articles/active-directory/saas-apps/media/skysite-tutorial/claims.png

@@ -1,5 +1,5 @@
 ---
-title: 'Tutorial: Azure Active Directory single sign-on (SSO) integration with SKYSITE | Microsoft Docs'
+title: 'Tutorial: Azure AD SSO integration with SKYSITE'
 description: Learn how to configure single sign-on between Azure Active Directory and SKYSITE.
 services: active-directory
 author: jeevansd
@@ -9,20 +9,18 @@ ms.service: active-directory
 ms.subservice: saas-app-tutorial
 ms.workload: identity
 ms.topic: tutorial
-ms.date: 08/27/2019
+ms.date: 02/22/2022
 ms.author: jeedes
 ---
 
-# Tutorial: Azure Active Directory single sign-on (SSO) integration with SKYSITE
+# Tutorial: Azure AD SSO integration with SKYSITE
 
 In this tutorial, you'll learn how to integrate SKYSITE with Azure Active Directory (Azure AD). When you integrate SKYSITE with Azure AD, you can:
 
 * Control in Azure AD who has access to SKYSITE.
 * Enable your users to be automatically signed-in to SKYSITE with their Azure AD accounts.
 * Manage your accounts in one central location - the Azure portal.
 
-To learn more about SaaS app integration with Azure AD, see [What is application access and single sign-on with Azure Active Directory](../manage-apps/what-is-single-sign-on.md).
-
 ## Prerequisites
 
 To get started, you need the following items:
@@ -34,27 +32,26 @@ To get started, you need the following items:
 
 In this tutorial, you configure and test Azure AD SSO in a test environment.
 
-* SKYSITE supports **IDP** initiated SSO
+* SKYSITE supports **IDP** initiated SSO.
 
-* SKYSITE supports **Just In Time** user provisioning
+* SKYSITE supports **Just In Time** user provisioning.
 
-## Adding SKYSITE from the gallery
+## Add SKYSITE from the gallery
 
 To configure the integration of SKYSITE into Azure AD, you need to add SKYSITE from the gallery to your list of managed SaaS apps.
 
-1. Sign in to the [Azure portal](https://portal.azure.com) using either a work or school account, or a personal Microsoft account.
+1. Sign in to the Azure portal using either a work or school account, or a personal Microsoft account.
 1. On the left navigation pane, select the **Azure Active Directory** service.
 1. Navigate to **Enterprise Applications** and then select **All Applications**.
 1. To add new application, select **New application**.
 1. In the **Add from the gallery** section, type **SKYSITE** in the search box.
 1. Select **SKYSITE** from results panel and then add the app. Wait a few seconds while the app is added to your tenant.
 
-
-## Configure and test Azure AD single sign-on for SKYSITE
+## Configure and test Azure AD SSO for SKYSITE
 
 Configure and test Azure AD SSO with SKYSITE using a test user called **B.Simon**. For SSO to work, you need to establish a link relationship between an Azure AD user and the related user in SKYSITE.
 
-To configure and test Azure AD SSO with SKYSITE, complete the following building blocks:
+To configure and test Azure AD SSO with SKYSITE, perform the following steps:
 
 1. **[Configure Azure AD SSO](#configure-azure-ad-sso)** - to enable your users to use this feature.
     1. **[Create an Azure AD test user](#create-an-azure-ad-test-user)** - to test Azure AD single sign-on with B.Simon.
@@ -67,15 +64,15 @@ To configure and test Azure AD SSO with SKYSITE, complete the following building
 
 Follow these steps to enable Azure AD SSO in the Azure portal.
 
-1. In the [Azure portal](https://portal.azure.com/), on the **SKYSITE** application integration page, click on **Properties tab** and perform the following step: 
+1. In the Azure portal, on the **SKYSITE** application integration page, click on **Properties tab** and perform the following step: 
 
-	![Single sign-on properties](./media/skysite-tutorial/config05.png)
+	![Screenshot shows Single sign-on properties.](./media/skysite-tutorial/property.png)
 
 	* Copy the **User access URL** and you have to paste it in **Configure SKYSITE SSO section**, which is explained later in the tutorial.
 
 1. On the **SKYSITE** application integration page, navigate to **single sign-on**.
 1. On the **Select a single sign-on method** page, select **SAML**.
-1. On the **Set up single sign-on with SAML** page, click the edit/pen icon for **Basic SAML Configuration** to edit the settings.
+1. On the **Set up single sign-on with SAML** page, click the pencil icon for **Basic SAML Configuration** to edit the settings.
 
    ![Edit Basic SAML Configuration](common/edit-urls.png)
 
@@ -89,9 +86,9 @@ Follow these steps to enable Azure AD SSO in the Azure portal.
 
 	a. Click the **pen** next to **Groups returned in claim**.
 
-	![Screenshot shows User claims with the option to Add new claim.](./media/skysite-tutorial/config01.png)
+	![Screenshot shows User claims with the option to Add new claim.](./media/skysite-tutorial/claims.png)
 
-	![Screenshot shows the Manage user claims dialog box where you can enter the values described.](./media/skysite-tutorial/config02.png)
+	![Screenshot shows the Manage user claims dialog box where you can enter the values described.](./media/skysite-tutorial/groups.png)
 
 	b. Select **All Groups** from the radio list.
 
@@ -126,28 +123,22 @@ In this section, you'll enable B.Simon to use Azure single sign-on by granting a
 1. In the Azure portal, select **Enterprise Applications**, and then select **All applications**.
 1. In the applications list, select **SKYSITE**.
 1. In the app's overview page, find the **Manage** section and select **Users and groups**.
-
-   ![The "Users and groups" link](common/users-groups-blade.png)
-
 1. Select **Add user**, then select **Users and groups** in the **Add Assignment** dialog.
-
-	![The Add User link](common/add-assign-user.png)
-
 1. In the **Users and groups** dialog, select **B.Simon** from the Users list, then click the **Select** button at the bottom of the screen.
 1. If you're expecting any role value in the SAML assertion, in the **Select Role** dialog, select the appropriate role for the user from the list and then click the **Select** button at the bottom of the screen.
 1. In the **Add Assignment** dialog, click the **Assign** button.
 
-### Configure SKYSITE SSO
+## Configure SKYSITE SSO
 
 1. Open a new web browser window and sign into your SKYSITE company site as an administrator and perform the following steps:
 
-4. Click on **Settings** on the top right side of page and then navigate to **Account setting**.
+1. Click on **Settings** on the top right side of page and then navigate to **Account setting**.
 
-	![Screenshot shows Account setting selected from Settings.](./media/skysite-tutorial/config03.png)
+	![Screenshot shows Account setting selected from Settings.](./media/skysite-tutorial/settings.png)
 
-5. Switch to **Single sign on (SSO)** tab, perform the following steps:
+1. Switch to **Single sign on (SSO)** tab, perform the following steps:
 
-	![Screenshot shows the Single sign on tab where you can enter the values described.](./media/skysite-tutorial/config04.png)
+	![Screenshot shows the Single sign on tab where you can enter the values described.](./media/skysite-tutorial/certificate.png)
 
 	a. In the **Identity Provider sign in URL** text box, paste the value of **User access URL**, which you have copied from the **properties** tab in Azure portal.
 
@@ -161,16 +152,12 @@ In this section, a user called Britta Simon is created in SKYSITE. SKYSITE suppo
 
 ## Test SSO 
 
-In this section, you test your Azure AD single sign-on configuration using the Access Panel.
-
-When you click the SKYSITE tile in the Access Panel, you should be automatically signed in to the SKYSITE for which you set up SSO. For more information about the Access Panel, see [Introduction to the Access Panel](https://support.microsoft.com/account-billing/sign-in-and-start-apps-from-the-my-apps-portal-2f3b1bae-0e5a-4a86-a33e-876fbd2a4510).
-
-## Additional resources
+In this section, you test your Azure AD single sign-on configuration with following options.
 
-- [ List of Tutorials on How to Integrate SaaS Apps with Azure Active Directory ](./tutorial-list.md)
+* Click on Test this application in Azure portal and you should be automatically signed in to the SKYSITE for which you set up the SSO.
 
-- [What is application access and single sign-on with Azure Active Directory? ](../manage-apps/what-is-single-sign-on.md)
+* You can use Microsoft My Apps. When you click the SKYSITE tile in the My Apps, you should be automatically signed in to the SKYSITE for which you set up the SSO. For more information about the My Apps, see [Introduction to the My Apps](../user-help/my-apps-portal-end-user-access.md).
 
-- [What is conditional access in Azure Active Directory?](../conditional-access/overview.md)
+## Next steps
 
-- [Try SKYSITE with Azure AD](https://aad.portal.azure.com/)
+Once you configure SKYSITE you can enforce session control, which protects exfiltration and infiltration of your organization’s sensitive data in real time. Session control extends from Conditional Access. [Learn how to enforce session control with Microsoft Cloud App Security](/cloud-app-security/proxy-deployment-aad).