How to enroll Access Appliance primary server as a service provider in Azure active directory Identity provider

Description

(Azure Ad is SAML2.0 based 3^rd identity provider)

1. Open Microsoft Azure portal. Login using your personal credentials.
2. Click Enterprise applications under Azure services.
    
3. Click New application (  ).
    
4. Click Create your own application.
    
5. Provide an IDP name and select Integrate any other application you don't find in the gallery (Non-gallery) and click Create.
    
6. Once the Application gets created, click Single sign-on, and then click the SAML tile.
    
7. Click on Edit in the Basic SAML Configuration pane.
   
8. Enter the values of both Entity ID and Reply URL. 
   Entity ID :  https://<consoleip>:14161/login
   Replay URL : https://<consoleip>:14161/api/appliance/v1.0/authentication/sso/login/callback?redirectURL=/login
    
9. Select Edit option for Attribute & Claim and click Add new claim.
    
10. Enter the Name as userPrincipalName and enter the Source attribute as user.userprincipalname.
     
11. Click Add a group claim, and select All groups under Group Claims and enter the Source attribute as DNSDomain\sAMAccountName.
     
12. Under Advance settings for group name, check the Customize the name for the group claim checkbox and provide memberOf as the name for the claim and click Save.
     
13. For the SAML certificate, click Edit. Select Sign SAML response and assertion as the Signing option and click Save.
     
14. Download the Federation metadata XML from the link provided.
     
15. Click Users and groups for the IDP application created.
     
16. Click Add user/group.
     
17. Select User or groups for the assignment and click Save and then, click Assign.
     
18. Navigate to the Access Appliance UI. Go to Settings > Security > Single-sign on.
19. Provide a name for IDP and upload the federation metadata XML and click Save.
20. Add the same users/groups to NetBackup > Security > RBAC as SAML users/groups.
21. Login with SSO.

Related Knowledge Base Articles

How to enroll Access Appliance primary server as a service provider in ADFS

How to enroll Access Appliance primary server as a service provider to Okta

How to enroll Access Appliance primary server as a service provider to PingFederate