back

Microsoft Azure SAML

Configure IdP

1. Login to Microsoft Azure, open the menu and search for "Azure Active Directory" and click it.
   
   

2. Click "Add" and select "Enterprise application".
   
   

3. Click on "Create your own application".
   
   

4. Choose a name for the app (Sandbox), and select the "Non-gallery" option.
   
   

5. Select "Set up single sign on".
   
   

6. Select "SAML".
   
   

7. A settings menu will be shown. In this menu all the SAML details will be filled from now on. The details provided by email from Hatching support are required in this step as mentioned in Prerequisites. Click on "Edit".
   

8. Fill in the received Service Provider Entity ID at "Identifier (Entity ID)" (dot 1).
   The "Single Sign on URL" should be placed in the "Reply URL" field (dot 3).
   Enter the "SSO start URL" at the field "Sign on URL"
   
   Finally, hit Save (dot 4). After saving, you can hit the X not shown in the screenshot and click Edit at step 2, "Attributes & Claims".
   
   

9. First add the attribute "email" and select "user.mail" as its value. Next, add the attribute "displayname" and select "user.displayname" as its value.
   
   

10. Proceed by clicking on "App Federation Metadata Url" and copy the URL and send this to [email protected]. **.
    
    
    
    

Roles

This example uses App Roles to configure roles for this SAML app. There are more ways to configure this.

1. Create roles by navigating to the App Registrations list and clicking the Recorded Future Sandbox app.
2. Open the App Roles pane and create App roles for each role listed in the role matrix.
3. Navigate to the "Attributes and Claims" section of the Recorded Future Sandbox Enterprise Application registration. Add the attribute sandbox_role bound to the value user.assignedroles.

References:

• Enterprise app role management
• How to add app roles in apps

Assigning roles

When assigning a user to the Recorded Future Sandbox Enterprise application registration, you will now be asked to assign a role.