help on configuring SSO with AzureAD using SAML

RE: help on configuring SSO with AzureAD using SAML

Justin Watts — Tue, 28 Jul 2020 11:55:42 GMT

This article should be helpful https://community.appian.com/support/w/kb/330/kb-1108-how-to-create-a-self-signed-certificate-for-saml-authentication

RE: help on configuring SSO with AzureAD using SAML

Pankaj Kabdal — Tue, 28 Jul 2020 11:25:59 GMT

How to get service provider signin certificate

RE: help on configuring SSO with AzureAD using SAML

lucadomenella — Fri, 17 Jan 2020 15:00:25 GMT

i add how i resolved for helping the community in case will happen to others

i filled the attribute mapping with: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname

and not: givenname or user.givenname

RE: help on configuring SSO with AzureAD using SAML

Justin Watts — Mon, 13 Jan 2020 13:57:23 GMT

Unique User Identifier is synonymous with NameID in this case. Drilling into the attributes configuration, you should see that Azure clarifies this like the following

So if you want to use that in Appian: leave the username configuration as NameID and make sure the account you use for confirming SSO has an Appian username matching the principal name in Azure.

RE: help on configuring SSO with AzureAD using SAML

lucadomenella — Mon, 13 Jan 2020 10:24:41 GMT

my config on azure is like this:

givenname -> user.givenname

surname -> user.surname

emailaddress -> user.mail

name -> user.userprincipalname

Unique User Identifier -> user.userprincipalname

is your the same ? i dont have any NameID....

Luca

RE: help on configuring SSO with AzureAD using SAML

Justin Watts — Fri, 10 Jan 2020 18:49:16 GMT

In my example, I have mine set to the default NameID field, which in Azure is mapped to user principal name by default (at least in my tenant).

What error are you getting?

RE: help on configuring SSO with AzureAD using SAML

lucadomenella — Fri, 10 Jan 2020 18:42:18 GMT

Justin,

do you remember how what you put in: Username Attribute ?

i get an error, but its difficult to troubleshoot on the cloud version. Testing it from Azure, works 😞

cheers

Luca

RE: help on configuring SSO with AzureAD using SAML

lucadomenella — Fri, 10 Jan 2020 18:09:10 GMT

nevermind, i found it myself, its documented in a KB

RE: help on configuring SSO with AzureAD using SAML

lucadomenella — Fri, 10 Jan 2020 18:00:54 GMT

what have you put in the field: Authentication Method ????

RE: help on configuring SSO with AzureAD using SAML

lucadomenella — Fri, 10 Jan 2020 17:16:51 GMT

hi Justin,

thanks a lot. About the certificate, did you managed to use the AzureAD certificate created by Azure or did you created a selfsigned and upload to Appian and Azure too ?

RE: help on configuring SSO with AzureAD using SAML

Justin Watts — Fri, 10 Jan 2020 16:38:18 GMT

I've done this successfully, but it's been awhile so I don't recall many specific details.

I don't think the Service Provider Name really matters, and looking through my configurations, my Appian Entity ID matches the Identity/Entity ID in the Azure Application configuration. Redacting my exact values but below is an example of what I mean.