Tutorial: Azure AD SSO integration with Zero Networks

In this tutorial, you'll learn how to integrate Zero Networks with Azure Active Directory (Azure AD). When you integrate Zero Networks with Azure AD, you can:

• Control in Azure AD who has access to Zero Networks.
• Enable your users to be automatically signed-in to Zero Networks with their Azure AD accounts.
• Manage your accounts in one central location - the Azure portal.

Prerequisites

To get started, you need the following items:

• An Azure AD subscription. If you don't have a subscription, you can get a free account.
• Zero Networks single sign-on (SSO) enabled subscription.

Scenario description

In this tutorial, you configure Azure AD SSO for the Zero Networks Admin Portal and Access Portal.

• Zero Networks supports SP initiated SSO.

Note

Identifier of this application is a fixed string value so only one instance can be configured in one tenant.

Add Zero Networks from the gallery

To configure the integration of Zero Networks into Azure AD, you need to add Zero Networks from the gallery to your list of managed SaaS apps.

1. Sign in to the Azure portal using a work Microsoft account.
2. On the left navigation pane, select the Azure Active Directory service.
3. Navigate to Enterprise Applications and then select All Applications.
4. To add new application, select New application.
5. In the Add from the gallery section, type Zero Networks in the search box.
6. Select Zero Networks from results panel and then add the app. Wait a few seconds while the app is added to your tenant.

Configure Azure AD SSO

Follow these steps to enable Azure AD SSO in the Azure portal.

1. In the Azure portal, on the Zero Networks application integration page, find the Manage section and select Single sign-on.

2. On the Select a single sign-on method page, select SAML.

3. On the Set up single sign-on with SAML page, click the pencil icon for Basic SAML Configuration to edit the settings.

   

4. On the Basic SAML Configuration section, perform the following step.

   a. In the Sign on URL text box, type the URL: https://portal.zeronetworks.com/#/login

5. On the Set up single sign-on with SAML page, in the SAML Signing Certificate section, find Certificate (Base64) and select Download to download the certificate and save it on your computer.

   

6. On the Set up Zero Networks section, copy the appropriate URL(s) based on your requirement.

   

Configure Zero Networks SSO

1. Log in to the Zero Networks Admin Portal as an administrator.

2. Navigate to Settings > Identity Providers.

3. Click on Microsoft Azure and perform the following steps.

   

   1. Copy Identifier(Entity ID) value, paste this value into the Identifier text box in the Basic SAML Configuration section in the Azure portal.

   2. Copy Reply URL (Assertion Consumer Service URL) value, paste this value into the Reply URL text box in the Basic SAML Configuration section in the Azure portal.

   3. In the Login URL textbox, paste the Login URL value which you have copied from the Azure portal.

   4. In the Logout URL textbox, paste the Logout URL value which you have copied from the Azure portal.

   5. Open the downloaded Certificate (Base64) from the Azure portal into Notepad and paste the content into the Certificate(Base64) textbox.

   6. Click Save.

Configure user assignment requirement

1. In the Azure portal, on the Zero Networks application integration page, find the Manage section and select Properties.
2. Change User assignment required? to No.

Test SSO

In this section, you test your Azure AD single sign-on configuration with following options.

• Click on Test this application in Azure portal. This will redirect to Zero Networks Sign-on URL where you can initiate the login flow.

• Go to Zero Networks Sign-on URL directly and initiate the login flow from there.

• You can use Microsoft My Apps. When you click the Zero Networks tile in the My Apps, this will redirect to Zero Networks Sign-on URL. For more information about the My Apps, see Introduction to the My Apps.