Here are the steps in order to make SAML integration with Microsoft Azure
Log in to the Azure Portal and navigate to Enterprise Applications.
Select Create your own application.
Enter a name for your application.
Ensure the following option is selected:
| Option | Value |
|---|---|
| Application type | Integrate any other application you don't find in the gallery (Non-gallery) |
Click Create to proceed.
In the newly created application, go to:
Select the SAML option.
In the Basic SAML Configuration section, click Edit.
Enter the following values:
| Setting | Value |
|---|---|
| Identifier (Entity ID) | https://www.cloudns.net |
| Reply URL (Assertion Consumer Service URL) | https://www.cloudns.net |
Click Save to apply these settings.
Download the Federation Metadata XML file from Azure.
Log in to ClouDNS and upload the XML file in the SAML configuration popup.
After uploading the Federation Metadata XML file to ClouDNS, an ASC URL will be generated.
Return to the Basic SAML Configuration in Azure and click Edit again.
Update the following fields using the ASC URL:
| Setting | Value |
|---|---|
| Identifier (Entity ID) | https://www.cloudns.net |
| Reply URL (Assertion Consumer Service URL) | https://www.cloudns.net/saml/user/XXXXX(Replace the URL with the ASC URL generated at ClouDNS.) |
Click on the edit button next to Token signing certificate in SAML Certificates section.
Next, select "Sign SAML resposne" next to Signing Option and make sure the algorithm is SHA-256.
| Setting | Value |
|---|---|
| Signing Option | Sign SAML resposne |
| Algorithm | SHA-256 |
Download the updated Metadata XML file from Azure.
Return to ClouDNS, upload the new XML file in the SAML configuration popup, and click Add to complete the setup.
In Azure, go to Users and groups within the application.
Assign access to the relevant team members to enable their login through SSO.
Please allow Azure some time to update and then use the Test this application feature in Azure to verify the integration.
Once the test is successful, your team members will be able to log in to ClouDNS using Azure SSO.
If the permissions for this particular user are set correctly, you will be able to see the configured app in My Apps in Azure (https://myapplications.microsoft.com/). Once you click on the app, you will be automatically logged in to your account at ClouDNS.