How to configure SAML 2.0 on Azure for CloudEdge
04/01/2022
5 People found this article helpful
367,739 Views
Description
This article describes how to configure Azure Active Directory through SAML 2.0 to use as an identity provider for SonicWall Cloud Edge.
- Configuring the Enterprise Application on Azure AD.
- Exporting the signing certificate.
- Configuring the SAML 2.0 connection in the Management Platform
Note - Group Support
Be aware that if you choose to configure Azure AD through SAML 2.0, your user's groups will not automatically be synced with their account on the SonicWall Cloud Edge side (like with the App Registration). You will have to manually add or remove users from groups in your SonicWall Cloud Edge console.
Resolution
Configuring the Enterprise Application in Azure Active Directory
1.) Start by signing into your Azure Active Directory and selecting Enterprise Applications.
![Graphical user interface, text, application Description automatically generated](https://sonicwall.rightanswers.com/portal/app/portlets/results/onsitehypermedia/090220314570632.png?linkToken=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJzb25pY3dhbGwiLCJleHAiOjE3NTY2MDk4NDQsImlhdCI6MTcyNTA3Mzg0NH0.jUlRd8m3vULXcw-H-cfLM4GT6Y4Obar9cEmt74mKY0o)
2.) Search for the "SonicWall Cloud Edge" application and click to select it.
![Graphical user interface, text, application, email Description automatically generated](https://sonicwall.rightanswers.com/portal/app/portlets/results/onsitehypermedia/090220314820549.png?linkToken=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJzb25pY3dhbGwiLCJleHAiOjE3NTY2MDk4NDQsImlhdCI6MTcyNTA3Mzg0NH0.jUlRd8m3vULXcw-H-cfLM4GT6Y4Obar9cEmt74mKY0o)
3.) If no Application is found then Create a "+ New Application"
![Image](https://sonicwall.rightanswers.com/portal/app/portlets/results/onsitehypermedia/090220314759962.jpeg?linkToken=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJzb25pY3dhbGwiLCJleHAiOjE3NTY2MDk4NDQsImlhdCI6MTcyNTA3Mzg0NH0.jUlRd8m3vULXcw-H-cfLM4GT6Y4Obar9cEmt74mKY0o)
4.) Select "Create" (This may take a few minutes)
5.) You'll have to assign access to users or groups (if you are using the Azure AD free edition you won't be able to select groups and will have to select individual users)
![Image](https://sonicwall.rightanswers.com/portal/app/portlets/results/onsitehypermedia/090220314971861.png?linkToken=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJzb25pY3dhbGwiLCJleHAiOjE3NTY2MDk4NDQsImlhdCI6MTcyNTA3Mzg0NH0.jUlRd8m3vULXcw-H-cfLM4GT6Y4Obar9cEmt74mKY0o)
6.) Once users have been added and saved you will select the second option to "2. Set up single sign on"
![Image](https://sonicwall.rightanswers.com/portal/app/portlets/results/onsitehypermedia/090220314587040.png?linkToken=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJzb25pY3dhbGwiLCJleHAiOjE3NTY2MDk4NDQsImlhdCI6MTcyNTA3Mzg0NH0.jUlRd8m3vULXcw-H-cfLM4GT6Y4Obar9cEmt74mKY0o)
7.) You will then select the "SAML" method
![Graphical user interface, text Description automatically generated with medium confidence](https://sonicwall.rightanswers.com/portal/app/portlets/results/onsitehypermedia/090220314473466.png?linkToken=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJzb25pY3dhbGwiLCJleHAiOjE3NTY2MDk4NDQsImlhdCI6MTcyNTA3Mzg0NH0.jUlRd8m3vULXcw-H-cfLM4GT6Y4Obar9cEmt74mKY0o)
8.) We'll be editing the "Basic SAML Configuration"
![Image](https://sonicwall.rightanswers.com/portal/app/portlets/results/onsitehypermedia/090220314632059.png?linkToken=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJzb25pY3dhbGwiLCJleHAiOjE3NTY2MDk4NDQsImlhdCI6MTcyNTA3Mzg0NH0.jUlRd8m3vULXcw-H-cfLM4GT6Y4Obar9cEmt74mKY0o)
9.) On this step we'll be adding the following as our "Identifier":
urn:auth0:SonicWall-production:YOURWORKSPACEHERE-oc
For our "Reply URL (Assertion Consumer Service URL)" we'll be inputting the following:
https://auth.sonicwalledge.com/login/callback?connection=YOURWORKSPACE-oc
![Graphical user interface, application, website Description automatically generated](https://sonicwall.rightanswers.com/portal/app/portlets/results/onsitehypermedia/090220314346476.png?linkToken=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJzb25pY3dhbGwiLCJleHAiOjE3NTY2MDk4NDQsImlhdCI6MTcyNTA3Mzg0NH0.jUlRd8m3vULXcw-H-cfLM4GT6Y4Obar9cEmt74mKY0o)
10.) Rename the Attributes & Claims in Step 2 to below given values.
![Graphical user interface, text, application, email Description automatically generated](https://sonicwall.rightanswers.com/portal/app/portlets/results/onsitehypermedia/090220314705185.png?linkToken=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJzb25pY3dhbGwiLCJleHAiOjE3NTY2MDk4NDQsImlhdCI6MTcyNTA3Mzg0NH0.jUlRd8m3vULXcw-H-cfLM4GT6Y4Obar9cEmt74mKY0o)
11.) Finally we'll be downloading your SAML Signing certificate in Step 3 (the Base64 version).
In step 5 we'll be expanding the "Step-by-step instructions" and copying your Login URL
![Image](https://sonicwall.rightanswers.com/portal/app/portlets/results/onsitehypermedia/090220314499895.png?linkToken=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJzb25pY3dhbGwiLCJleHAiOjE3NTY2MDk4NDQsImlhdCI6MTcyNTA3Mzg0NH0.jUlRd8m3vULXcw-H-cfLM4GT6Y4Obar9cEmt74mKY0o)
Configuring the SAML 2.0 Application on SonicWall CloudEdge console
- ) Click on settings in your SonicWall CloudEdge console, go to your Identity Providers and select the option to " + Add Provider"
![Graphical user interface, application Description automatically generated](https://sonicwall.rightanswers.com/portal/app/portlets/results/onsitehypermedia/090220314207103.png?linkToken=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJzb25pY3dhbGwiLCJleHAiOjE3NTY2MDk4NDQsImlhdCI6MTcyNTA3Mzg0NH0.jUlRd8m3vULXcw-H-cfLM4GT6Y4Obar9cEmt74mKY0o)
- ) Select "SAML 2.0 Identity Providers"and then "Continue"
![Graphical user interface, text, application Description automatically generated](https://sonicwall.rightanswers.com/portal/app/portlets/results/onsitehypermedia/090220314779426.png?linkToken=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJzb25pY3dhbGwiLCJleHAiOjE3NTY2MDk4NDQsImlhdCI6MTcyNTA3Mzg0NH0.jUlRd8m3vULXcw-H-cfLM4GT6Y4Obar9cEmt74mKY0o)
3.) Fill out the following:
- Sign in URL:This will be your "Login URL" you copied from Azure
- Domain Aliases:This will be the domain used by your users (everything after the "@" sign in their email)
- X509 Signing Certificate:This will be the certificate we downloaded from Azure.
- After everything has been added select "Done"
![Graphical user interface, text, application Description automatically generated](https://sonicwall.rightanswers.com/portal/app/portlets/results/onsitehypermedia/090220314702361.png?linkToken=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJzb25pY3dhbGwiLCJleHAiOjE3NTY2MDk4NDQsImlhdCI6MTcyNTA3Mzg0NH0.jUlRd8m3vULXcw-H-cfLM4GT6Y4Obar9cEmt74mKY0o)
Related Articles
Categories