You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
fix(user-account-connect-saml-sso): rename connect-saml-sso doc title and slug
This title is misleading and may let people think that this documentation is about SSO in a generic way, but it's about AD FS SSO.
Rename ADFS to AD FS as well (official Microsoft naming)
Signed-off-by: sebferrer <[email protected]>
Copy file name to clipboardExpand all lines: pages/account/customer/ovhcloud-account-connect-saml-adfs/guide.en-gb.md
+20-20Lines changed: 20 additions & 20 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,36 +1,36 @@
1
1
---
2
-
title: Enabling SSO connections with your OVHcloud account
3
-
slug: connect-saml-sso
4
-
excerpt: "Find out how to link your ADFS to your OVHcloud account using SAML 2.0"
2
+
title: Enabling Active Directory Federation Services (AD FS) SSO connections with your OVHcloud account
3
+
slug: connect-saml-sso-adfs
4
+
excerpt: "Find out how to link your Active Directory Federation Services (AD FS) to your OVHcloud account using SAML 2.0"
5
5
section: 'Advanced use'
6
6
order: 02
7
-
updated: 2022-10-13
7
+
updated: 2023-04-06
8
8
---
9
9
10
10
**Last updated 13th October 2022**
11
11
12
12
## Objective
13
13
14
-
You can use **single sign-on** (SSO) to connect to your OVHcloud account. To enable these connections, your account and your Active Directory Federation Services (ADFS) have to be configured using Security Assertion Markup Language (SAML) authentications.
14
+
You can use **single sign-on** (SSO) to connect to your OVHcloud account. To enable these connections, your account and your Active Directory Federation Services (AD FS) have to be configured using Security Assertion Markup Language (SAML) authentications.
15
15
16
16
**This guide explains how to link your OVHcloud account to an external Active Directory.**
17
17
18
18
## Requirements
19
19
20
-
- Active Directory Federation Services (ADFS) running on your server
20
+
- Active Directory Federation Services (AD FS) running on your server
21
21
- An [OVHcloud account](https://docs.ovh.com/gb/en/customer/create-ovhcloud-account/)
22
22
- Access to the [OVHcloud Control Panel](https://www.ovh.com/auth/?action=gotomanager&from=https://www.ovh.co.uk/&ovhSubsidiary=GB)
23
23
24
24
## Instructions
25
25
26
26
> [!primary]
27
27
>
28
-
> In order for a service provider (i.e. your OVHcloud account) to perform an SSO connection with an identity provider (i.e. your ADFS), the essential part is to establish a mutual trust relationship.
28
+
> In order for a service provider (i.e. your OVHcloud account) to perform an SSO connection with an identity provider (i.e. your AD FS), the essential part is to establish a mutual trust relationship.
29
29
>
30
30
31
-
### Establishing ADFS trust
31
+
### Establishing AD FS trust
32
32
33
-
Your ADFS acts as your identity provider. Authentication requests by your OVHcloud account will only be accepted if it is declared as a trusted party first.
33
+
Your AD FS acts as your identity provider. Authentication requests by your OVHcloud account will only be accepted if it is declared as a trusted party first.
34
34
35
35
In the Active Directory context, this means adding it as `Relying Party Trust`.
36
36
@@ -77,7 +77,7 @@ Click `Next`{.action} again to proceed.
77
77
78
78
{.thumbnail}
79
79
80
-
Click the `Close`{.action} button in the last window. The OVHcloud relying party trust is now added to your ADFS.
80
+
Click the `Close`{.action} button in the last window. The OVHcloud relying party trust is now added to your AD FS.
81
81
82
82
{.thumbnail}
83
83
@@ -121,11 +121,11 @@ Click the `Apply`{.action} button and confirm with `OK`{.action}.
121
121
122
122
{.thumbnail}
123
123
124
-
With the mapping completed, your ADFS now trusts OVHcloud as a service provider. The next step is to ensure that the OVHcloud account trusts your ADFS as identity provider.
124
+
With the mapping completed, your AD FS now trusts OVHcloud as a service provider. The next step is to ensure that the OVHcloud account trusts your AD FS as identity provider.
125
125
126
126
### Establishing OVHcloud account trust and configuring the connection
127
127
128
-
Adding your ADFS as a trusted identity provider is done in the [OVHcloud Control Panel](https://www.ovh.com/auth/?action=gotomanager&from=https://www.ovh.co.uk/&ovhSubsidiary=GB) where you can provide the identity provider metadata.
128
+
Adding your AD FS as a trusted identity provider is done in the [OVHcloud Control Panel](https://www.ovh.com/auth/?action=gotomanager&from=https://www.ovh.co.uk/&ovhSubsidiary=GB) where you can provide the identity provider metadata.
129
129
130
130
[Log in](https://www.ovh.com/auth/?action=gotomanager&from=https://www.ovh.co.uk/&ovhSubsidiary=GB) and click on your profile in the top-right corner.
131
131
@@ -143,11 +143,11 @@ Click on the `SSO Login`{.action} button.
The trust of your ADFS as identity provider is thus established but you still have to add groups to your OVHcloud account.
164
+
The trust of your AD FS as identity provider is thus established but you still have to add groups to your OVHcloud account.
165
165
166
166
> [!warning]
167
167
> If you try to connect at this stage via SSO, you will probably receive a `Not in valid groups` error message.
168
168
>
169
169
> That is because your OVHcloud account checks if the authenticating user belongs to a group that actually exists on the account.
170
170
>
171
171
172
-
To resolve this, verify which information is mapped to the "Group" attribute that your ADFS returns.
172
+
To resolve this, verify which information is mapped to the "Group" attribute that your AD FS returns.
173
173
174
174
Consider the following example of the user "John Doe" from your Active Directory as shown in the image below.
175
175
176
176
{.thumbnail}
177
177
178
-
Next, check the mapping in ADFS:
178
+
Next, check the mapping in AD FS:
179
179
180
180
{.thumbnail}
181
181
@@ -206,19 +206,19 @@ You can then check that the group is added to your OVHcloud account in the `Grou
206
206
207
207
When you connect with the Active Directory user "johndoe" now, your OVHcloud account will recognize that the user has the "REGULAR" role, specified by its group.
208
208
209
-
You can then disconnect from your account and log in again with your ADFS as identity provider.
209
+
You can then disconnect from your account and log in again with your AD FS as identity provider.
210
210
211
211
### Connect via SSO
212
212
213
213
On the [OVHcloud login page](https://www.ovh.com/auth/?action=gotomanager&from=https://www.ovh.co.uk/&ovhSubsidiary=GB), enter your [NIC handle](https://docs.ovh.com/gb/en/customer/create-ovhcloud-account/#what-is-my-nic-handle) followed by **/idp** without entering a password, and click the `Login`{.action} button.
You are then redirected to your ADFS login page. Enter a login/password of a user of your LDAP Active Directory, then click the `Sign in`{.action} button.
217
+
You are then redirected to your AD FS login page. Enter a login/password of a user of your LDAP Active Directory, then click the `Sign in`{.action} button.
0 commit comments