Microsoft Azure AD SAML Configuration

This session shows how to register a SAML application on the Microsoft Azure AD portal. When registering the application, we are getting the following value that is needed for later configuration in Datawiza Cloud Management Console (DCMC):

• Metadata Url

App registration in Azure

1. Choose Enterprise Applications from the left sidebar and create a new Registration by clicking New registration.
   
   Click Create your own application, input the name and select Integrate any other application you don't find in the gallery (Non-gallery), then click Create:

2. Select Users and Groups, click Add user/group:
   By default, no one was assigned to this application. So click None Selected and select the users and groups that should have access to log in:
   Click Assign:
   

3. On the left-hand navigation under Manage click Single sign-on. Select SAML on the Select a single sign-on method page:
   Then you will be navigated to the Set up Single Sign-On with SAML page.
   For Basic SAML Configuration, click Edit and configure with the following values:

   • Identifier (Entity ID): http://localhost:9772/saml/metadata
   • Reply URL (Assertion Consumer Service URL): http://localhost:9772/saml/acs

For Attributes & Claims, Under Additional Claims click ... then Delete and confirm the action next to each row and delete the four default claims.
Click + Add new claim at the top of the page. Configure with the following values:

Name	Namespace	Source	Source attribute
email	Leave Empty	Attribute	user.userprincipalname
givenName	Leave Empty	Attribute	user.givenname
surname	Leave Empty	Attribute	user.surname
username	Leave Empty	Attribute	user.displayname

For groups, click + Add a group claim, select Security groups and customize the name of the group claim as groups:

1. Back to Set up Single Sign-On with SAML page, for SAML Signing Certificate, copy the App Federation Metadata Url which is the Metadata Url needed for DCMC configuration.

Summary

We have shown how to register a SAML application on azure AD. Please make sure to save the following value for later setting in DCMC.

• Metadata Url