Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Julia fix azure #4419

Open
wants to merge 8 commits into
base: develop
Choose a base branch
from
Binary file added docs/src/understand/single-sign-on/azure/00.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified docs/src/understand/single-sign-on/azure/01.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified docs/src/understand/single-sign-on/azure/02.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified docs/src/understand/single-sign-on/azure/03.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified docs/src/understand/single-sign-on/azure/04.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified docs/src/understand/single-sign-on/azure/05.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified docs/src/understand/single-sign-on/azure/06.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
58 changes: 38 additions & 20 deletions docs/src/understand/single-sign-on/azure/main.md
Original file line number Diff line number Diff line change
@@ -1,58 +1,76 @@
# How to set up SSO integration with Microsoft Azure
# How to set up SSO integration with Microsoft Entra ID

## Purpose and Scope
This document is for current and perspective users of the Wire cloud, who want to manage their users with Microsoft Entra ID, in Azure.

## Preprequisites

- <http://azure.microsoft.com> account, admin access to that account
- See also {ref}`sso-generic-setup`.
Before you begin, we are going to assume you have the following:
- An account on <http://azure.microsoft.com>
* admin access to that account, sufficient to add an application, and manage users.
- A team on https://app.wire.com/ or another Wire backend, and admin access to that team.

## Process

## Steps
### Creating a New Application
Go to [portal.azure.com](https://portal.azure.com/), and login. You should be brought to the 'Microsoft Azure' home page.
* In the 'Azure services' section, click on 'Microsoft Entra ID'

### Azure setup
```{image} 00.png
```
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Does this work / render as expected?


Go to <https://portal.azure.com/>, and click on 'Azure Active Directory'
in the menu to your left, then on 'Enterprise Applications':
You should now see the 'Default Directory | Overview' page.
* In the menu to your left, 'Manage' should already be selected. under manage, click on 'Enterprise Applications'

```{image} 01.png
```

Click on 'New Application':
This should bring you to the 'Enterprise applications| All applications' page.
* Click on 'New Application':

```{image} 02.png
```

Select 'Non-gallery application':
This brings you to the 'Browse Microsoft Entra Gallery' page.
* Select 'Create your own application':

```{image} 03.png
```

Fill in user-facing app name, then click 'add':
This should have opened a 'Create your own application' window in the current page.
* Fill in the user-visible app name with the name for this application that you want your users to see.
* Leave the option selected next to 'Integrate with any other application you don\'t find in the gallery', then click 'add':

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is Markdown. There should be no need to quote '. In fact, ' is no special character in Markdown. Are you sure you aren't after *...* or **...** (italics and bold) whenever you use '...'?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm not after a visual display style; i'm after 'this is exactly the string you will see on screen' vs "I will type this".

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

AFAIK the type face for this is block style. However, if you thought about it, this should be fine. (I was mostly worried about RestructuredText vs. Markdown misunderstandings 😅 )

```{image} 04.png
```

The app is now created. If you get lost, you can always get back to
it by selecting its name from the enterprise applications list you've
already visited above.
The app is now created, but is not yet configured. If you get lost, you can always get back to it by selecting its name from the 'Enterprise applications| All applications' page.

### Configuring your New Application

Click on 'Configure single sign-on'.
If you followed the prior step, you should now be at the screen containing the settings for your application. If you didn't, please find your app by opening azure, going to 'Microsoft Entra ID', and clicking on 'Enterprise Applications' in the left hand menu.

In the 'Getting Started' section of the page containing your application definition, Click on 'get started' in the '2. Set up single sign on' box.

```{image} 05.png
```

Select SAML:
You should now see the 'Single sign-on' page for your application definition.
* Click on the 'SAML' box with the puzzle piece in it.

```{image} 06.png
```

On the next page, you find a link to a configuration guide which you
can consult if you have any azure-specific questions. Or you can go
straight to adding the two config parameters you need:
The next page is the 'SAML-based Sign-on' page for your application definition. There is a helpful configuration guide at the top of the page which you can consult if you have any azure-specific questions.

Let's go straight to adding the two config parameters that are required, and saving.

In the 'Basic SAML Configuration' section, click on 'Edit'. This will bring up the 'Basic SAML Configuration' window.
* Enter <https://prod-nginz-https.wire.com/sso/finalize-login> for both 'Identifier (Entity ID)' and 'Reply URL(Assertion Consumer Service URL)'.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
* Enter <https://prod-nginz-https.wire.com/sso/finalize-login> for both 'Identifier (Entity ID)' and 'Reply URL(Assertion Consumer Service URL)'.
* Enter `https://prod-nginz-https.wire.com/sso/finalize-login` for both 'Identifier (Entity ID)' and 'Reply URL(Assertion Consumer Service URL)'.

```{image} 07.png
```

Enter <https://prod-nginz-https.wire.com/sso/finalize-login> for both identity and reply url. Save.

```{image} 08.png
```

Expand Down
Loading