-
Notifications
You must be signed in to change notification settings - Fork 325
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Julia fix azure #4419
base: develop
Are you sure you want to change the base?
Julia fix azure #4419
Changes from all commits
3fc78ec
08fb59e
c58f327
db06e5d
cbf3669
91e0f86
9d1050a
77c6109
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
Original file line number | Diff line number | Diff line change | ||||
---|---|---|---|---|---|---|
@@ -1,58 +1,76 @@ | ||||||
# How to set up SSO integration with Microsoft Azure | ||||||
# How to set up SSO integration with Microsoft Entra ID | ||||||
|
||||||
## Purpose and Scope | ||||||
This document is for current and perspective users of the Wire cloud, who want to manage their users with Microsoft Entra ID, in Azure. | ||||||
|
||||||
## Preprequisites | ||||||
|
||||||
- <http://azure.microsoft.com> account, admin access to that account | ||||||
- See also {ref}`sso-generic-setup`. | ||||||
Before you begin, we are going to assume you have the following: | ||||||
- An account on <http://azure.microsoft.com> | ||||||
* admin access to that account, sufficient to add an application, and manage users. | ||||||
- A team on https://app.wire.com/ or another Wire backend, and admin access to that team. | ||||||
|
||||||
## Process | ||||||
|
||||||
## Steps | ||||||
### Creating a New Application | ||||||
Go to [portal.azure.com](https://portal.azure.com/), and login. You should be brought to the 'Microsoft Azure' home page. | ||||||
* In the 'Azure services' section, click on 'Microsoft Entra ID' | ||||||
|
||||||
### Azure setup | ||||||
```{image} 00.png | ||||||
``` | ||||||
|
||||||
Go to <https://portal.azure.com/>, and click on 'Azure Active Directory' | ||||||
in the menu to your left, then on 'Enterprise Applications': | ||||||
You should now see the 'Default Directory | Overview' page. | ||||||
* In the menu to your left, 'Manage' should already be selected. under manage, click on 'Enterprise Applications' | ||||||
|
||||||
```{image} 01.png | ||||||
``` | ||||||
|
||||||
Click on 'New Application': | ||||||
This should bring you to the 'Enterprise applications| All applications' page. | ||||||
* Click on 'New Application': | ||||||
|
||||||
```{image} 02.png | ||||||
``` | ||||||
|
||||||
Select 'Non-gallery application': | ||||||
This brings you to the 'Browse Microsoft Entra Gallery' page. | ||||||
* Select 'Create your own application': | ||||||
|
||||||
```{image} 03.png | ||||||
``` | ||||||
|
||||||
Fill in user-facing app name, then click 'add': | ||||||
This should have opened a 'Create your own application' window in the current page. | ||||||
* Fill in the user-visible app name with the name for this application that you want your users to see. | ||||||
* Leave the option selected next to 'Integrate with any other application you don\'t find in the gallery', then click 'add': | ||||||
|
||||||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. This is Markdown. There should be no need to quote There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. I'm not after a visual display style; i'm after 'this is exactly the string you will see on screen' vs "I will type this". There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. AFAIK the type face for this is |
||||||
```{image} 04.png | ||||||
``` | ||||||
|
||||||
The app is now created. If you get lost, you can always get back to | ||||||
it by selecting its name from the enterprise applications list you've | ||||||
already visited above. | ||||||
The app is now created, but is not yet configured. If you get lost, you can always get back to it by selecting its name from the 'Enterprise applications| All applications' page. | ||||||
|
||||||
### Configuring your New Application | ||||||
|
||||||
Click on 'Configure single sign-on'. | ||||||
If you followed the prior step, you should now be at the screen containing the settings for your application. If you didn't, please find your app by opening azure, going to 'Microsoft Entra ID', and clicking on 'Enterprise Applications' in the left hand menu. | ||||||
|
||||||
In the 'Getting Started' section of the page containing your application definition, Click on 'get started' in the '2. Set up single sign on' box. | ||||||
|
||||||
```{image} 05.png | ||||||
``` | ||||||
|
||||||
Select SAML: | ||||||
You should now see the 'Single sign-on' page for your application definition. | ||||||
* Click on the 'SAML' box with the puzzle piece in it. | ||||||
|
||||||
```{image} 06.png | ||||||
``` | ||||||
|
||||||
On the next page, you find a link to a configuration guide which you | ||||||
can consult if you have any azure-specific questions. Or you can go | ||||||
straight to adding the two config parameters you need: | ||||||
The next page is the 'SAML-based Sign-on' page for your application definition. There is a helpful configuration guide at the top of the page which you can consult if you have any azure-specific questions. | ||||||
|
||||||
Let's go straight to adding the two config parameters that are required, and saving. | ||||||
|
||||||
In the 'Basic SAML Configuration' section, click on 'Edit'. This will bring up the 'Basic SAML Configuration' window. | ||||||
* Enter <https://prod-nginz-https.wire.com/sso/finalize-login> for both 'Identifier (Entity ID)' and 'Reply URL(Assertion Consumer Service URL)'. | ||||||
|
||||||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more.
Suggested change
|
||||||
```{image} 07.png | ||||||
``` | ||||||
|
||||||
Enter <https://prod-nginz-https.wire.com/sso/finalize-login> for both identity and reply url. Save. | ||||||
|
||||||
```{image} 08.png | ||||||
``` | ||||||
|
||||||
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Does this work / render as expected?