{"type":"doc","content":[{"type":"paragraph","content":[{"text":"Objective:","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","content":[{"text":"The document provides a detailed step-by-step guide on configuring SAML-based Single Sign-On (SSO) integration for Adeptia Connect (AC) with Microsoft Azure Identity Provider (IdP). It includes instructions for enabling SAML SSO within Adeptia, generating Adeptia metadata, and configuring the Azure portal for SSO setup.","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"What to Configure?","type":"text"}]},{"type":"paragraph","content":[{"text":"Adeptia SAML Configuration:","type":"text","marks":[{"type":"strong"}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Update deployment properties in the ","type":"text"},{"text":"value.yaml","type":"text","marks":[{"type":"code"}]},{"text":" file to enable SAML SSO and set the metadata generator's base URL.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Generate Adeptia metadata by accessing a specific URL, which produces an XML file containing essential information like EntityID, login, and logout URLs.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Store the Azure metadata XML file in a designated shared folder and configure its location in the deployment file.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Create users and roles aligned with Azure AD for logging into Adeptia applications.","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"Azure SAML Configuration:","type":"text","marks":[{"type":"strong"}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Use the Azure portal to create a custom enterprise application, configure SAML settings, and integrate metadata from Adeptia.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Enter EntityID, login, and logout URLs derived from Adeptia metadata.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Add required users and roles in the Azure Enterprise application.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Share the federation metadata XML file from Azure with the Adeptia infrastructure team for the final setup.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Complete the configuration by enabling SAML SSO in AC4 and testing login.","type":"text"}]}]}]},{"type":"paragraph"},{"type":"rule"},{"type":"heading","attrs":{"level":2},"content":[{"text":"How To Configure?","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Adeptia SAML Configuration","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Go to portal deployment value.yaml.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Search the property ","type":"text"},{"text":"SAML_SSO_ENABLE ","type":"text","marks":[{"type":"strong"}]},{"text":"and change the value ‘false’ to ‘true’ to enable SAML SSO in AC4.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Then search ","type":"text"},{"text":"SAML_SSO_METADATA_GENERATOR_ENTITY_BASE_URL ","type":"text","marks":[{"type":"strong"}]},{"text":"property and change the default value(","type":"text"},{"text":"https://ac-webapp-gateway","type":"text","marks":[{"type":"link","attrs":{"href":"https://ac-webapp-gateway"}}]},{"text":") from application URL like ","type":"text"},{"text":"https://","type":"text","marks":[{"type":"em"},{"type":"link","attrs":{"href":"https://sunlife-dev.adeptia.com"}}]},{"text":".","type":"text","marks":[{"type":"em"}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"To","type":"text"},{"text":" ","type":"text","marks":[{"type":"em"}]},{"text":"generate the Adeptia Metadata ","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Login into an application via admin user using the following URL ","type":"text"},{"text":"https://<>/?user=admin","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Then open a new tab and hit the below URL to generate the Adeptia metadata XML ","type":"text"}]}]}]}]}]},{"type":"panel","attrs":{"panelType":"info"},"content":[{"type":"paragraph","content":[{"text":"://:/saml2/service-provider-metadata/","type":"text","marks":[{"type":"em"}]}]},{"type":"paragraph","content":[{"text":"where,","type":"text"}]},{"type":"paragraph","content":[{"text":" is the name of the protocol, for example, HTTP or HTTPS.","type":"text"}]},{"type":"paragraph","content":[{"text":" is the IP address of the server hosting Adeptia Connect Cloud.","type":"text"}]},{"type":"paragraph","content":[{"text":" is the port number of the computer hosting Adeptia Connect.","type":"text"}]},{"type":"paragraph","content":[{"text":" is the name provided by the user to the IdP. This is the same value you define in the portal values for the environment variable ","type":"text"},{"text":"SAML_SSO_IDPS_CONFIGURATION_0_REGISTRATION_ID","type":"text","marks":[{"type":"strong"}]},{"text":".yaml file. The default value for this variable is default.","type":"text"}]},{"type":"paragraph"},{"type":"paragraph","content":[{"text":"For example,","type":"text","marks":[{"type":"strong"}]},{"text":" ","type":"text"},{"text":"http://192.168.1.10:8080/saml2/service-provider-metadata/default","type":"text","marks":[{"type":"link","attrs":{"href":"http://192.168.1.10:8080/saml2/service-provider-metadata/default"}}]},{"text":".","type":"text"}]}]},{"type":"orderedList","attrs":{"order":3},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Once you hit the URL, an Adeptia Metadata XML file will download. This metadata contains EntityID, Login, and Logout URLs.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Then create a SAML Folder under the shared folder and copy the Azure Metadata XML generated by the client into the SAML Folder.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Then search ","type":"text"},{"text":"SAML_SSO_IDPS_CONFIGURATION_0_METADATA_LOCATION ","type":"text","marks":[{"type":"strong"}]},{"text":"property in Portal Deployment and configure the client IDP metadata XML location in the below format. ","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":" ","type":"text"},{"text":"file:///shared/SAML/<>","type":"text","marks":[{"type":"em"}]}]},{"type":"orderedList","attrs":{"order":7},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Create the users and custom roles that Azure AD has for login into the Adeptia Application by using the admin bypass URL ","type":"text"},{"text":"https://<>/?user=admin","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"paragraph"},{"type":"paragraph","content":[{"text":"NOTE:-","type":"text","marks":[{"type":"strong"}]},{"text":" Points no 5 and 6 will be completed after generating Azure AD metadata XML. ","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Azure SAML Configuration","type":"text"}]},{"type":"paragraph"},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Login into Azure ","type":"text"},{"type":"inlineCard","attrs":{"url":"https://portal.azure.com"}},{"text":" ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Navigate to Microsoft Intra ID from the search bar","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click on the Enterprise Application","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click on the + icon to add a New Application","type":"text"}]}]}]},{"type":"mediaSingle","attrs":{"layout":"align-start","width":516,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":925,"id":"caefd04d-139d-47ea-bd98-927aca7ca635","collection":"contentId-471728207","type":"file","height":259},"marks":[{"type":"border","attrs":{"size":1,"color":"#172b4d"}}]}]},{"type":"orderedList","attrs":{"order":5},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click on the + icon to create our own application","type":"text"}]}]}]},{"type":"mediaSingle","attrs":{"layout":"align-start","width":516,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":1480,"id":"b96e9484-ccfc-4d5c-bfbb-ed10fd1a7b29","collection":"contentId-471728207","type":"file","height":656},"marks":[{"type":"border","attrs":{"size":1,"color":"#172b4d"}}]}]},{"type":"orderedList","attrs":{"order":6},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Enter the required details and click on save.","type":"text"}]}]}]},{"type":"mediaSingle","attrs":{"layout":"align-start","width":516,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":669,"id":"598eb23a-c489-4adf-bc49-760e0f62a37e","collection":"contentId-471728207","type":"file","height":589},"marks":[{"type":"border","attrs":{"size":2,"color":"#172b4d"}}]}]},{"type":"orderedList","attrs":{"order":7},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Once you have created the application go to the single sign-on option and select the Saml option.","type":"text"}]}]}]},{"type":"mediaSingle","attrs":{"layout":"align-start","width":505,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":1400,"alt":"image-20241128-055454.png","id":"b8468c2e-0c69-4e88-a116-aa319ed0e0c2","collection":"contentId-471728207","type":"file","height":796},"marks":[{"type":"border","attrs":{"size":1,"color":"#172b4d"}}]}]},{"type":"orderedList","attrs":{"order":8},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Enter the details of the Saml from the Adeptia application metadata file that you have generated. Fill in the Entity ID URL, The Reply URL will be the login URL, and the Logout URL. ","type":"text"}]}]}]},{"type":"mediaSingle","attrs":{"layout":"align-start","width":516,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":1707,"alt":"image-20241128-060100.png","id":"96eec011-9019-4510-8ff4-35e68ddeedd7","collection":"contentId-471728207","type":"file","height":960},"marks":[{"type":"border","attrs":{"size":1,"color":"#172b4d"}}]},{"type":"caption","content":[{"text":"Image 8.1","type":"text"}]}]},{"type":"mediaSingle","attrs":{"layout":"align-start","width":516,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":799,"id":"63a8b28d-9b47-4e22-8bca-383f4b64ec67","collection":"contentId-471728207","type":"file","height":186},"marks":[{"type":"border","attrs":{"size":1,"color":"#172b4d"}}]},{"type":"caption","content":[{"text":"Image 8.2","type":"text"}]}]},{"type":"orderedList","attrs":{"order":9},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Once the setup is completed navigate to the Home and then go to the User tab to add the user with the required roles to the application.","type":"text"}]}]}]},{"type":"mediaSingle","attrs":{"layout":"align-start","width":516,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":814,"alt":"image-20241128-055844.png","id":"f110c3cc-746f-4075-a167-effe3bbc8366","collection":"contentId-471728207","type":"file","height":256},"marks":[{"type":"border","attrs":{"size":1,"color":"#172b4d"}}]}]},{"type":"paragraph","content":[{"text":"10. Now go to the Enterprise application users section and add the users to whom we have to give access.","type":"text"}]},{"type":"mediaSingle","attrs":{"layout":"align-start","width":516,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":1247,"alt":"image-20241128-055950.png","id":"e8614d40-527b-4eb9-ba55-470302e6984c","collection":"contentId-471728207","type":"file","height":517},"marks":[{"type":"border","attrs":{"size":1,"color":"#172b4d"}}]},{"type":"caption","content":[{"text":"Image 10.1","type":"text"}]}]},{"type":"mediaSingle","attrs":{"layout":"align-start","width":516,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":915,"id":"4dad37bd-2b6e-4b6c-8e60-c5cb26f809c4","collection":"contentId-471728207","type":"file","height":219},"marks":[{"type":"border","attrs":{"size":1,"color":"#172b4d"}}]},{"type":"caption","content":[{"text":"Image 10.2","type":"text"}]}]},{"type":"paragraph","content":[{"text":"11. After the configuration download the federation metadata XML and share it with the Adeptia Infra team so that they can configure the same metadata XML at their end. Check the points 5 and 6 for ","type":"text"},{"text":"Adeptia SAM Configuration","type":"text","marks":[{"type":"underline"},{"type":"link","attrs":{"href":"https://docs.google.com/document/d/1drEGrU9iWB7u2b0EUIvtY_tpMqZwjCY-/edit#heading=h.ufnhbyhonpp4"}}]}]},{"type":"mediaSingle","attrs":{"layout":"align-start","width":516,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":715,"id":"d1c1426e-06ec-4aca-a42b-24f0d8799303","collection":"contentId-471728207","type":"file","height":96},"marks":[{"type":"border","attrs":{"size":1,"color":"#172b4d"}}]}]},{"type":"paragraph","content":[{"text":"12. After adding the user enable the SSO in AC4 and try to log in with SAML Account.","type":"text"}]},{"type":"paragraph"}],"version":1}

Browser not supported