Configuring SAML Authentication with Office 365

1. Download and Install ADSelfService Plus:
   1. Download ADSelfService Plus from https://www.manageengine.com/products/ad-manager/.
   2. Install the application.
2. To add SMA application to your Office 365 account:
   1. Log in to ADSelfService Plus account with valid credentials.

   2. Click Password Sync/Single Sign On.

      

   3. Click Office 365 application.

   4. Select Single Sign On in the Modules drop-down menu.

      

   5. Specify Domain Name, Display Name, and Available Policies.
   6. Click Download SSO Certificate.

   7. Fetch the Details of Login URL, Logout URL and Download the SAML certificate.

      

3. Configuring SAML on your SMA appliance:
   1. Navigate to System > Certificates and import SAML Certificate.

   2. Create a SAML domain:

      • Enter a suitable Domain Name, for example: SAML Office 365
      • Appliance ID should be in the format http://{Appliance IP or Hostname}.
      • Server ID and Authentication Service URL is Login URL of the SAML Domain

      • Logout Service URL is the Logout Service URL of SAML Domain

   3. During login, provide the correct Gsuite credentials.

      

      You can now proceed with authentication from Virtual Office portal and NetExtender. When you select Office 365 domain in the login page, you are redirected to the ADSelfService Plus login page, and after providing correct credentials, the authentication is successful.