Configuring Microsoft Active Directory as Identity Provider

Microsoft Active Directory (AD) is a directory service developed by Microsoft for managing and organizing resources in a network. verifies the identity of users and devices before granting access to network resources. This is usually done via a username and password.

This article provides a step-by-step guide to configuring Microsoft Active Directory as the Identity Provider for all your services.

Prerequisites

1. Please ensure you have created the SSO configuration for the service you want to access and set Microsoft Active Directory as its Identity Provider.

2. Also, ensure that the user(s) is present in the Microsoft Active Directory and the respective service portal that you are trying to access.

3. The same user(s) must be present in Scalefusion and the SSO configuration of the respective service is applied to it.

Step 1: Configuring Microsoft Active Directory as an Identity Provider on Scalefusion dashboard

1. Navigate to OneIdP > Identity Providers.

2. Click on the New Provider button.
   

   

3. Select Microsoft Active Directory and click on Next.
   

   

4. You will see a message as shown below if you have not set up the On-Prem Connector and completed the configuration.
   

   

5. Click on the Finish button.

6. Please refer to our guide on setting up the On-Prem Connector.

Step 2: Associating Active Directory Identity Provider with a Directory

1. Navigate to OneIdP > Directory.

2. Click on the 3-dots under Actions for the concerned Domain.

3. Click on Settings.
   

   

4. Go to the Federated Authentication tab and toggle on the “Enable Scalefusion OnPremise Connector as Authentication source” button. Click Next and Save it.
   

   

5. This completes the setup. The users will see the Active Directory page for authentication whenever they access an application.

User Login Flow

When the user enters their email on the service login page, they will be redirected to OneIdP. From there, OneIdP will redirect the user to the chosen identity provider (Microsoft Active Directory, in this case) for authentication. Once the identity provider authenticates the user, they will be granted access to the service.