Mixing
Azure Active Directory to authenticate multiple applications
I have a situation which I have not been able to find examples of online. I have three country specific applications E, F and G which share to common applications A and B.
I am looking to have each of the country applications, E, F and G to connect to applications A and B through SSO using Azure AD as the IDP (SAML 2.0). Each of the application E, F & G have individual users who shouldn't log into the other application but the users should be able to authenticate on A and B
Is there anyone who has implemented such a setting willing to share their experience?
azure-active-directory saml-2.0 asked Nov 20 '18 at 17:39
Masinde MuliroMasinde Muliro
53911432
add a comment |
I have a situation which I have not been able to find examples of online. I have three country specific applications E, F and G which share to common applications A and B.
I am looking to have each of the country applications, E, F and G to connect to applications A and B through SSO using Azure AD as the IDP (SAML 2.0). Each of the application E, F & G have individual users who shouldn't log into the other application but the users should be able to authenticate on A and B
Is there anyone who has implemented such a setting willing to share their experience?
azure-active-directory saml-2.0 asked Nov 20 '18 at 17:39
Masinde MuliroMasinde Muliro
53911432
add a comment |
I have a situation which I have not been able to find examples of online. I have three country specific applications E, F and G which share to common applications A and B.
I am looking to have each of the country applications, E, F and G to connect to applications A and B through SSO using Azure AD as the IDP (SAML 2.0). Each of the application E, F & G have individual users who shouldn't log into the other application but the users should be able to authenticate on A and B
Is there anyone who has implemented such a setting willing to share their experience?
azure-active-directory saml-2.0 asked Nov 20 '18 at 17:39
Masinde MuliroMasinde Muliro
53911432
I have a situation which I have not been able to find examples of online. I have three country specific applications E, F and G which share to common applications A and B.
I am looking to have each of the country applications, E, F and G to connect to applications A and B through SSO using Azure AD as the IDP (SAML 2.0). Each of the application E, F & G have individual users who shouldn't log into the other application but the users should be able to authenticate on A and B
Is there anyone who has implemented such a setting willing to share their experience?
azure-active-directory saml-2.0 azure-active-directory saml-2.0 asked Nov 20 '18 at 17:39
Masinde MuliroMasinde Muliro
53911432
asked Nov 20 '18 at 17:39
Masinde MuliroMasinde Muliro
53911432
asked Nov 20 '18 at 17:39
Masinde MuliroMasinde Muliro
53911432
asked Nov 20 '18 at 17:39
Masinde MuliroMasinde Muliro
53911432
asked Nov 20 '18 at 17:39
Masinde MuliroMasinde Muliro
53911432
53911432
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
You might be able to do this with Azure AD conditional access?
I would add an IDP for each country application e.g. ADFS and then connect the application to the local ADFS and federate ADFS with Azure AD.
That way users can only login to their local AD.
answered Nov 21 '18 at 18:46
nzpcmadnzpcmad
28.1k2893143
Let me investigate your suggestion, I'll get back to you
– Masinde Muliro
Nov 22 '18 at 19:39
From the reading I've done and examples I've gone through, ADFS seems to be running on Windows server? The three country applications run online on linux VMs so no chance of running the Relying Party Trust Wizard
– Masinde Muliro
Nov 23 '18 at 19:24
When I said an IDP, it doesn't have to be ADFS. It could be identityserver or IdaaS e.g. Auth0, Okta etc.
– nzpcmad
Nov 25 '18 at 18:06
add a comment |
Your Answer
StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53398574%2fazure-active-directory-to-authenticate-multiple-applications%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
You might be able to do this with Azure AD conditional access?
I would add an IDP for each country application e.g. ADFS and then connect the application to the local ADFS and federate ADFS with Azure AD.
That way users can only login to their local AD.
answered Nov 21 '18 at 18:46
nzpcmadnzpcmad
28.1k2893143
Let me investigate your suggestion, I'll get back to you
– Masinde Muliro
Nov 22 '18 at 19:39
From the reading I've done and examples I've gone through, ADFS seems to be running on Windows server? The three country applications run online on linux VMs so no chance of running the Relying Party Trust Wizard
– Masinde Muliro
Nov 23 '18 at 19:24
When I said an IDP, it doesn't have to be ADFS. It could be identityserver or IdaaS e.g. Auth0, Okta etc.
– nzpcmad
Nov 25 '18 at 18:06
add a comment |
You might be able to do this with Azure AD conditional access?
I would add an IDP for each country application e.g. ADFS and then connect the application to the local ADFS and federate ADFS with Azure AD.
That way users can only login to their local AD.
answered Nov 21 '18 at 18:46
nzpcmadnzpcmad
28.1k2893143
Let me investigate your suggestion, I'll get back to you
– Masinde Muliro
Nov 22 '18 at 19:39
From the reading I've done and examples I've gone through, ADFS seems to be running on Windows server? The three country applications run online on linux VMs so no chance of running the Relying Party Trust Wizard
– Masinde Muliro
Nov 23 '18 at 19:24
When I said an IDP, it doesn't have to be ADFS. It could be identityserver or IdaaS e.g. Auth0, Okta etc.
– nzpcmad
Nov 25 '18 at 18:06
add a comment |
You might be able to do this with Azure AD conditional access?
I would add an IDP for each country application e.g. ADFS and then connect the application to the local ADFS and federate ADFS with Azure AD.
That way users can only login to their local AD.
answered Nov 21 '18 at 18:46
nzpcmadnzpcmad
28.1k2893143
You might be able to do this with Azure AD conditional access?
I would add an IDP for each country application e.g. ADFS and then connect the application to the local ADFS and federate ADFS with Azure AD.
That way users can only login to their local AD.
answered Nov 21 '18 at 18:46
nzpcmadnzpcmad
28.1k2893143
answered Nov 21 '18 at 18:46
nzpcmadnzpcmad
28.1k2893143
answered Nov 21 '18 at 18:46
nzpcmadnzpcmad
28.1k2893143
answered Nov 21 '18 at 18:46
nzpcmadnzpcmad
28.1k2893143
28.1k2893143
Let me investigate your suggestion, I'll get back to you
– Masinde Muliro
Nov 22 '18 at 19:39
From the reading I've done and examples I've gone through, ADFS seems to be running on Windows server? The three country applications run online on linux VMs so no chance of running the Relying Party Trust Wizard
– Masinde Muliro
Nov 23 '18 at 19:24
When I said an IDP, it doesn't have to be ADFS. It could be identityserver or IdaaS e.g. Auth0, Okta etc.
– nzpcmad
Nov 25 '18 at 18:06
add a comment |
Let me investigate your suggestion, I'll get back to you
– Masinde Muliro
Nov 22 '18 at 19:39
From the reading I've done and examples I've gone through, ADFS seems to be running on Windows server? The three country applications run online on linux VMs so no chance of running the Relying Party Trust Wizard
– Masinde Muliro
Nov 23 '18 at 19:24
When I said an IDP, it doesn't have to be ADFS. It could be identityserver or IdaaS e.g. Auth0, Okta etc.
– nzpcmad
Nov 25 '18 at 18:06
Let me investigate your suggestion, I'll get back to you
– Masinde Muliro
Nov 22 '18 at 19:39
Let me investigate your suggestion, I'll get back to you
– Masinde Muliro
Nov 22 '18 at 19:39
From the reading I've done and examples I've gone through, ADFS seems to be running on Windows server? The three country applications run online on linux VMs so no chance of running the Relying Party Trust Wizard
– Masinde Muliro
Nov 23 '18 at 19:24
From the reading I've done and examples I've gone through, ADFS seems to be running on Windows server? The three country applications run online on linux VMs so no chance of running the Relying Party Trust Wizard
– Masinde Muliro
Nov 23 '18 at 19:24
When I said an IDP, it doesn't have to be ADFS. It could be identityserver or IdaaS e.g. Auth0, Okta etc.
– nzpcmad
Nov 25 '18 at 18:06
When I said an IDP, it doesn't have to be ADFS. It could be identityserver or IdaaS e.g. Auth0, Okta etc.
– nzpcmad
Nov 25 '18 at 18:06
add a comment |
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53398574%2fazure-active-directory-to-authenticate-multiple-applications%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
