Azure Integration

Azure Integration

Azure AD Setup Guide 

 

Introduction

  1. An Owner must perform these configuration steps.  
  2. Importing Azure users adds a new type of user, the external Azure user, in addition to the regular Airstack users. External Azure users must be authenticated with Azure and will use SAML to log into Airstack.

Procedure

  1. Log in to Airstack.
  2. Click the menu button to open the left navigation pane. 



  3. Click  SETTINGS .



  4. Click AZURE CONFIG on the menu located to the left side of the screen.
    The Configure Azure AD page displays in the right pane.
  5. Click  GENERATE . The system generates a random secret token.  



    Note : Each time  GENERATE  is clicked, a new token is created. To maintain high security standards, it is recommended to periodically generate a new secret token. Reasons to do this include:

    ·           An employee who has had access to the secret token leaves the organization

    ·           A connection is compromised (change immediately)

    ·           A significant amount of time has passed since the secret token was created or changed

    When a new secret token is generated, it must be updated in Azure as well. See step 13


  6. In a separate window or tab, log in to Microsoft’s Azure Portal at  portal.azure.com . The Azure Home page displays
  7. Click 
    Azure Active Directory
     on the left navigation menu. A page showing your organization’s name displays. 



  8. Click  Enterprise Applications .


    The Enterprise Applications page displays.
  9. Click  +New Application  at the top of the page.
    The Add an application screen displays.


  10. In the Add an application section, click the  Non-gallery application  tile.




  11. Type a name for the application in the  Name  field, and then click  Add .
    An overview page for the new application displays.

  12. Click  Provisioning  in the left pane.
    The Provisioning page displays in the right pane.

  13. On the Provisioning page:
    1. Select Automatic from the  Provisioning Mode  drop-down list.
    2. Paste or enter the following URL into the  Tenant URL  field: 

    3. Copy the secret token from Airstack (see step 5) and paste it into the  Secret Token  field.
    4. Click  Test Connection .
    5. Click  Save .
    6. Click  Mappings .
      The Mappings section expands.

  14. In the Mappings section, click  Synchronize Azure Active Directory Groups to custompasso .
    The Attribute Mapping page displays.

  15. Click  No  to disable group mappings in the Enabled section, and then click  Save  and confirm the dialog. Groups are not supported at this time.



  16. Click  X  at the top right of the pane to return to the Provisioning page.
  17. Click  Synchronize Azure Active Directory Users to customappsso .
    A number of default attributes display in the bottom section. Most are not supported and should be removed.
  18. Click  Delete  next to the attribute mappings entries not shown below until the mapping list appears as:




    Default entries vary but may include:
    1. jobTitle
    2. preferredLanguage
    3. address fields (country, city, postalCode, streetAddress, etc)
    4. department
    5. manager
    6. phoneNumbers
  19. Click  Save  and confirm the Save changes dialog.
  20. Click the  X  at the top right of the pane to return to the Provisioning page.
  21. Click  Save  at the top of the page (unless the  Save  button is grayed out).



  22. Click  Single sign-on  in the left pane.
    The Select a single sign-on method page displays in the right pane.

  23. Click the  SAML  tile.
    The Setup Single Sign-on with SAML page displays.

  24. From the  Basic SAML Configuration  tile, click the  Edit  icon.
    The Basic SAML Configuration screen displays in a pane on the right.
  25. Configure the settings as follows:
    1. Paste the following URL into the  Identifier (Entity ID)  field:  https://api-as.lenovosoftware.com/0/as/common/saml/sp
    2. Paste the following URL into the  Reply URL (Assertion Consumer Service URL)  field:   https://api-as.lenovosoftware.com/0/as/common/saml/acs
    3. Click  Save , and then click  X  after saving. If a message that asks if you want to test displays, click  No, I’ll test later .





  26. From the SAML Signing Certificate section of the Set Up Single Sign-on with SAML page, copy the URL from the  App Federation Metadata Url  field.


  27. Return to the Configure Azure AD page in Airstack.
  28. Paste the URL into the  App Federation Metadata URL  field and click  CHECK METADATA .
    The Certificate, Login URL, and Logout URL display.



  29. Return to Azure, and then click  Users and Groups  from the left navigation.



  30. Click + Add user .
    The Add Assignment and Users and Groups pages display next to each other. The Users and Groups page displays a list of users.
  31. Search for a new user or users and click  Select.



  32. Click  Assign .




    The Users and Groups page displays a list of users, including the one just added. Provisioning typically begins 20-60 minutes after setup. Once provisioning is initiated, users are provisioned to Airstack on a regular basis.



  33. Click  Provisioning  in the left pane.
    The Provisioning page displays in the right pane.
  34. Set the  Provisioning Status  to On.

    Note
    : Provisioning Status should not be turned on until after users have been added.

     


  35. Click  Save . To initiate provisioning immediately, click  Refresh .


You can also download a PDF version of the Azure AD Setup Guide .











    • Recent Articles

    • How to contact sales

      To contact sales please visit the contact us page.
    • Airstack Security

      How does Airstack ensure that saved passwords are secure? If you choose to store your login credentials in the Airstack Password Vault, you will first be prompted to create a Master Password. This Master Password is not stored in Airstack and is only ...
    • How to Start a Meeting

      AirStack has a built in meeting feature. This allows you to start conferences with others in your organization.  To get started, follow the steps below: 1. Log into AirStack. 2. In the top right hand corner, you should see an icon of a telephone. 3. ...
    • Azure Integration

      Azure AD Setup Guide    Introduction An Owner must perform these configuration steps.   Importing Azure users adds a new type of user, the external Azure user, in addition to the regular Airstack users. External Azure users must be authenticated with ...
    • Airstack Outlook Add-in Download

      Use the Airstack Outlook Add-in to easily schedule your next meeting.  One click adds the meeting information (phone number, meeting URL, etc.) into the body of your calendar invite. Requirements: Outlook for Windows 2016+ Download the Airstack ...
    • Popular Articles

    • Airstack System Status

      Information about the status of Airstack can be found on the Status Page or on Twitter. 
    • How do I submit product feedback?

      You are able to submit feedback to us from any screen inside of Airstack by two methods. The menu in upper left corner of the screen  The Help icon in upper right
    • Airstack Terms of Service

      Please see the following link to view the Airstack Terms of Service
    • Airstack Privacy Policy

      Please see the following link for the Airstack Privacy Policy
    • How is Airstack licensed / priced ?

      Airstack uses a monthly subscription licensing model.  There are two tiers of pricing: 1) Teams which is designed for workgroups and small departments 2) Business which is designed for small and medium-sized organizations.  Information on Airstack ...