topic Re: SSO with Azure AD in Portal

SSO with Azure AD

OferY — Wed, 23 Jun 2021 05:23:26 GMT

If you use Azure Active Directory as your Identity Provider, you can now use single sign-on (SSO) authentication with the Azure AD to log into the Infinity Portal.

Azure allows the services hosted on the Infinity Portal to access the portal with the single set of credentials that the user already has.

When you activate the SSO with Azure AD, the sign-in page automatically redirects you to the configured AzureAD sign-in page.

For more details see Infinity Portal guide.

Re: SSO with Azure AD

Kim_Moberg — Mon, 22 Jun 2020 08:56:57 GMT

Hi Ofer,

A really needed update though I am still missing more information in regards to meta data and user role assignment in Azure AD.

I get sign in error like this in Azure.

The signed in user '{user}' is not assigned to a role for the application '{appId}'({appName}).

I have tried to configure Azure AD Manifest file like for Sandblast Mobile SSO.

I know CG SaaS only have two kinds of rules vs. Sandblast Mobile SSO which are "Admin" and "Read-Only"

Thanks

Kim

Re: SSO with Azure AD

OferY — Wed, 24 Jun 2020 15:43:53 GMT

Hi Kim,

Thank you for your time today.

As concluded today, the missing piece was the mapping of the Infinity roles ("value" field) to the appRoles in the application Manifest file.

You need to define per each Infinity role (Admin/Read-Only) the corresponding Azure application role.

Next, you need to assign the role to the user.

We are working to update the documentation with the above steps.

Best regards,

Ofer

Re: SSO with Azure AD

mats — Sat, 19 Sep 2020 08:11:42 GMT

👍