Aerobase with Azure SAML Provider

Problem

Aerobase with Azure SAML Provider

Solution

This article is tested in AB ver 17.0.1The lower versions configuration may vary

Prior to the configuration make sure the customer provided the following data:

Azure AD metadata (XML file or URL)

Attribute name in URI format as it will be received in SAML token

AD group names

The configuration of SAML for Azure SSO is similar to Aerobase with Okta SAML Provider , the difference is in the configuration of attribute mappers.

Follow the Aerobase with Okta SAML Provider, the parts of the Azure AD configuration can be skipped since in most cases the customer configures it on his side and provide us with configuration metadata (as mentioned in the article).

Follow the Map SAML attribute to realm role, but instead of the friendly name of the attribute use the full URI name (should be provided by the customer)

Make sure the customer provided the group name (Attribute Value).

Configure the username attribute.

Go back to SAML provider settings and make sure it’s configured as per above instructions.