Azure SSO

Configure an Azure AD Identity Provider

Configure Microsoft Azure Active Directory (AD) as an identity provider to let users log in to your Connect tenant using their Azure AD credentials.

Follow the below steps to configure Azure AD as an identity provider.

1. Set up an Azure AD application.
2. Setup your an Azure AD SSO on Webex Connect.
3. Test the connection.

Configure SSO on Azure

To Configure SSO on Azure, follow the procedure below:

1. Log in to your Azure portal I.e., Microsoft Azure
2. Click Azure Active Directory under Azure services.

3. On the left pane, click Enterprise applications under Manage.

4. Click + New application.

5. Click + Create your own application.

6. Do the following in the Create your own application section:
   1. Enter a valid name for your application.

2. Select Integrate any other application you don’t find in the gallery (Non-gallery) under What are you looking to do with your application?
3. Click Create.
   The Overview page is displayed.

7. On the left pane, click Single sign-on and then click SAML.

8. Click Edit in Basic SAML Configuration and enter/update the details.

📘

Note

Entity ID, Assertions Consumer Service URL are available on Webex Connect. It is available under Single Sign-On Settings.

Setting up SAML Configuration

1. Log in to your Webex tenant and click Single Sign-On Settings.

2. In the Single Sign-On Settings page enter the Identifier (Entity ID).

   📘

   Note

   Please make sure the same Entity ID is configured in Azure and Webex Connect. We recommend using the Entity ID available in Connect.

3. Copy the Identifier value from Webex Connect Service Provider Details.

4. Click Add Identifier and paste the value.

5. Enter the Reply URL (Assertion Consumer Service URL). To get this value, login to your Webex Connect and navigate Single Sign-On Settings.
6. Copy the Reply URL (Assertion Consumer Service URL) value from Webex Connect Service Provider Details.

7. Click Add reply URL and paste the value.

8. Click Save.

9. Click Edit in Attributes & Claims and enter/update the details.

   Attributes	Values	Description
   mobileno	user.telephonenumber	The telephone number of the user
   loginid	user.mail	The email ID of the user
   firstname	user.displayname	The first name of the user
   Unique User Identifier	user.mail	The email ID of the user

   📘

   Attributes in assertion data

   The attributes are case-sensitive and should be entered in the displayed cases above.

   • Steps to add an Attribute Enter Name, Namespace in Manage Claim.

• Select the required Source.
• Select the required Source attribute from the drop-down.
• Click Save.

10. To download the SAML Certificates, click Certificate (Base64 ) Download.

Configuring SSO on Webex Connect

1. Login to your Webex Connect and navigate to Single Sign-On Settings.
2. Enter the Identity Provider Login URL copied from the Azure portal.

3. Enter the Entity ID. Copy and Paste the Entity ID from Connect Single Sign-On page or Azure Single Sign-On page.

   📘

   Note:

   The Entity ID must be same in both the Webex Connect and Azure portals. We recommend using the Entity ID

4. Enter the Remote Logout URL copied from Azure Portal.

5. Upload the Base 64 Certificate (which is downloaded from the Azure) in the Identity Provider Certificate.
6. Select the Request Signature Method as RSA-SHA256 from the drop-down.
7. Click Save.
8. Click Confirm on the pop-up.

Testing the SSO Connection

1. On Single Sign-On Settings page click Test.
2. Enter the Email Id.

📘

NOTE

Please make sure the email address used for testing is registered on Azure with SSO app, created during the configuration on SSO.

3. Click Test.