Provides instructions for configuring Single Sign-on when using Microsoft Azure Cloud as your SAML Identity Provider.
You can obtain your Single Sign-on URL from within Adaptive by providing place holder values for the required fields and your SSO certificate in Administration > SAML SSO Settings. After saving the page with placeholder values, reload it to see the SSO URL at the bottom. Use this URL as both the Reply URL and Identifier (Entity ID) in Azure AD.
Visit Microsoft Azure's Tutorial: Azure Acitive Directory integration with Adaptive Insights for full details.
Set up Azure
- Log in to your Azure AD administrator interface.
- Navigate to Enterprise applications. Then go to All Applications.
- To add a new application, click New application on the top of the dialog.
- In the search box, type Adaptive Insights, select Adaptive Insights from the result panel. Click Add.
Configure Azure AD Single Sign-on
- In the Azure portal, on the Adaptive Insights application integration page, click Single sign-on.
- On the Single sign-on dialog, select Mode as SAML-based Sign-on to enable single sign-on.
- In the Adaptive Insights Domain and URLS section:
You can get the Identifier(Entity ID) and Reply URL values from Adaptive Insight's Manage SAML SSO settings page
- On the SAML Signing Certificate section, click Certificate (Base64) and then save the certificate file on your computer.
- Click Save.
- On the Adaptive Insights Configuration section, click Configure Adaptive Insights to open Configure sign-on window. Copy the SAML Entity ID, and SAML Single Sign-On Service URL from the Quick Reference section.
- In a different web browser window, log in to Adaptive Insights as an administrator.
- Navigate to Administration and click Manage SAML SSO Settings.
- On the SAML SSO Settings page:
- In the Identity provider name textbox, type a name for your configuration.
- Paste the SAML Entity ID value copied from Azure portal into the Identity provider Entity ID textbox.
- Paste the SAML Single Sign-On Service URL value copied from Azure portal into the Identity provider SSO URL textbox.
- Paste the SAML Single Sign-On Service URL value copied from Azure portal into the Custom logout URL textbox.
- To upload your downloaded certificate, click Choose file.
- Select the following, for:
- SAML user id, select User’s Adaptive Insights user name.
- SAML user id location, select User id in NameID of Subject.
- SAML NameID format, select Email address.
- Enable SAML, select Allow SAML SSO and direct Adaptive Insights login.
- Click Save.
- Click Manage SSO settings.
- Copy Adaptive Insights SSO URL and paste into the Identifier(Entity ID) and Reply URL textboxes in the Adaptive Insights Domain and URLs section in the Azure portal.
- Click Save.
Create An Azure AD test User
- In the Azure Portal, on the left navigation pane, click the Azure Active Directory icon.
- To display the list of users, go to Users and groups and click All users.
- To open the User dialog, click Add on the top.
- On the User dialog page:
- In the Name textbox, type BrittaSimon.
- In the User name textbox, type the email address of BrittaSimon.
- Select Show Password and write down the value of the Password.
- Click Create.
Create an Adaptive Insights test user
- Log in to Adaptive Insights as an administrator.
- Navigate to Administration.
- Click Users.
- Click New User.
- Enter the Name, Login, Email, and Password of a valid Azure Active Directory user you want to provision.
- Select a Role.
- Click Submit.
Assign the Azure AD Test User
These steps let Britta Simon, created earlier as an Azure AD test user, access Adaptive Insights via single sign-on.
- In the Azure portal, open the applications view and navigate to the directory view and go to Enterprise applications and click All applications.
- In the applications list, select Adaptive Insights.
- In the menu on the left, click Users and groups.
- Click Add button. Then select Users and groups in the Add Assignment dialog.
- On Users and groups dialog, select Britta Simon in the Users list.
- Click Select on Users and Groups.
- Click Assign on Add Assignment.
Test the SSO (Service Provider Initiated)
Login to the Adaptive Insights company without a password and you will be redirected to the SSO login page:
Enter your credentials and complete the SSO login.
You should be logged in to Adaptive Insights.
Test the SSO (Identity Provider Initiated)
- In the Azure Portal, go to Azure Active Directory > Enterprise Applications > Adaptive Insights > Properties.
- Copy the User access URL.
- Open a new browser window, paste the User access URL into the URL bar, and press Enter.
Logging in to Excel Interface for Planning and Adaptive Office Connect using SAML SSO
Once SAML SSO has been successfully configured and tested, Excel Interface for Planning and Adaptive Office Connect users only need to provide their usernames in the login form. Leave the password field blank.