Azure Active Directory extends on-premises Active Directory into the cloud, enabling users to use their primary organizational account to not only sign into their domain-joined devices and company resources but also all of the web and SaaS applications required. VIDIZMO is a SaaS application, and it can easily integrate with Azure AD and provide Federated Single Sign-On using SAML protocol.
Note: www.manage.windowsazure.com is the link to Azure's Managment Portal.
3. You will successfully log into Windows Azure Managment Portal. Click on ALL ITEMS on the left panel.
4. Now scroll down and find ACTIVE DIRECTORY on the left panel. Click on it.
5. You will redirect to the Active Directory page. Select the Active Directory which you want to configure.
7. Click on ADD at the bottom task bar.
8. A popup window will appear. Select Add an application my organization is developing option.
i. Enter the NAME of your application.
i. Enter SIGN-ON URL. The Sign on URL is used to get the response after authenticating from Azure AD (either pass or fail) to VIDIZMO.
ii. Enter APP ID URL. The App ID URL is used to authenticate the Sign In Request by Azure AD that it is coming from the trusted provider (in our case it is VIDIZMO) which we will configure later on in the VIDIZMO portal.
Note: Sign-On URL will be http://[your VIDIZMO domain]/Handlers/SignInHandler.ashx. For instance, http://lexcorptrainings.enterprisetube.com/Handlers/SignInHandler.ashx.
App ID URL will be Http://[your VIDIZMO domain]. For instance, http://lexcorptrainings.enterprisetube.com.
11. A message will appear stating: Your app has been added!
12. Now click on CONFIGURE.
13. Click on VIEW ENDPOINTS at the bottom task bar.
14. The App Endpoints popup window will open. Click on the Copy icon of SAML-P SIGN-ON ENDPOINT to copy it.
15. Now copy the FEDERATION METADATA DOCUMENT.
16. Open a new tab in the browser and paste the copied value. Copy the entityID parameter value from the first node of XML.
4. Select Windows Azure AD (SAMLP) from the dropdown list.
i. Enter Login URL which you copied in Step 14 of Configuration at Azure AD Portal.
iii. Enter Sign-In Caption Tooltip. This is shown on the sign in page of the application.
iv. Click Next (>) icon.
i. Enter SAMLP Request which is given below.
ii. Click on Next (>) icon to proceed.
Note: Replace [your VIDIZMO domain] with the URL of your Account/Channel.
i. Select Enabled SAMLP Request checkbox.
ii. Select Use Deflate checkbox.
8. Now click Enable under Trusted Domains box.
i. Enter *.windows.net as your first Trusted Domain. The second Trusted Domain is the entityID parameter copied in Step 15 of Configuration at Azure AD Portal.
ii. Select Allow embedding on above domain(s) only checkbox.
11. A message will appear stating: Channel details have been updated successfully. SSO has been successfully set up using Azure Active Directory.
2. You will redirect to the Sign In page. Click on Corporate Login.
4. You will redirect to Channel Homepage.