About this task
This task shows you how to configure your identity provider using Microsoft Entra ID
- SAML.
Procedure
-
Select Onboarding.
The welcome window
displays.
-
Select Secure Hybrid
Access [Secure Application
Access or Secure Network
Access].
The Identity Provider
window displays with ExtremeCloud
Universal ZTNAselected.
-
Select Next.
The Onboarding window displays.
-
Select the link to review the comprehensive tutorial on
creating a SAML-based SSO in Microsoft Azure Entra ID.
-
Copy and paste the Identifier link
and Reply
URL link in Azure per the instructions in the tutorial.
Azure creates a Login URL and
Microsoft Entra ID Identifier.
-
Paste the Login URL and Microsoft Entra ID
Identifier into their Universal ZTNA fields.
-
Upload the SAML Signing
Certificate you downloaded from Azure.
The UI instructions explain how to upload the certificate.
-
(Optional) Select All
Domains or Custom and enter the domain.
If you select Custom, fill in the approved domains. Applicable
for network and application access.
-
Select Validate
Information.
A message in the upper
right corner confirms the validation test passed.
-
Select Update.
Update Identity
Provider
pop-up window displays. This message cautions you that the
Identity Provider change logs out current workspace users.
-
If you decide to continue,
select Confirm.
-
Select Next.
The Onboarding - Access
Groups window displays.
-
Configure Access Groups.
-
Configure Resources.
-
Configure Applications and Application Groups.
You can skip this step if you
are using Secure Network Access.
-
Configure Policies.
Results
Your onboarding is complete. Your users, applications, and devices can now access the
network securely.