Azure SSO Configuration for Pingdom, Loggly, Papertrail, AppOptics and SolarWinds Observability

Step 1: Add a new custom SAML to your Azure

1. Open your Azure Portal.
2. Navigate to Azure Active Directory, and then in the left pane under Manage, click Enterprise Applications.
3. Click the New Application tab >> click "Create your own application"
4. Under the "What's the name of your app" section, type in your desired SAML app name and select "Integrate any other application you don't find in the gallery (Non-gallery).
5. At the bottom of the new pane that appears on the right, click Create.   

Step 2: Setup Basic SAML Configuration in Azure

1. In Azure, under Manage on the left pane, click Single sign-on.
2. Click SAML.
3. In the first section titled Basic SAML Configuration, click Edit.
4. Enter the requested information: (the values to paste will be coming from the SolarWinds Common Cloud settings SAML page)
   • Identifier (Entity ID): paste the Entity ID value
   • Reply URL: paste the ACS URL value
   • Sign on URL: paste the ACS URL value 
5. Click Save.

Step 3: Verify Attributes & Claims Accuracy

1. In User Attributes & Claims section, set up the following user attributes:
   • givenname - user.givenname
   • surname - user.surname
   • name - user.userprincipalname
   • NameID - user.mail (required if users will log in via the IdP's portal page - or known as IdP-initiated authentication)
   • Unique User Identifier - user.userprincipalname
2. The below attribute is required only if you will set the Role Mapping enabled. Otherwise, do not use this attribute.
   • Groups or groups - user.groups
   • To set up the above attribute in Azure:
     • Click "Add new claim" or edit the groups claim attribute by clicking the ellipsis if existing already.
     • Select "Groups assigned to the application".
     • Set the "Source attribute" to Group ID.
     • Checkbox input "Customize the name of the group claim must be checked.
     • Set the "Name (required)" to either groups or Groups.
     • Click Save.

1. In Azure SAML configuration page, copy the value of Azure AD Identifier and paste it on the Issuer (Entity ID) field in SolarWinds SAML settings page.
2. Copy the value of of Login URL and paste it on the SAML URL field.
3. Copy the value of Logout URL and paste in on the Single Logout URL field (optional).
4. From the SAML Certificates section in Azure, go to Certificate (Base64) and click Download. Open this certificate and paste the values in the Certificate field in the SolarWinds SAML Settings page.

Step 5.A: Setting up Role Mapping in SolarWinds AppOptics, Loggly, Papertrail, and Pingdom (this is applicable only if this feature will be enabled in your SAML. Otherwise, proceed to the next step)

1. You must use the Object ID of your group instead of the actual group name for the SSO authentication to work. Go to your Azure and look for Groups >> All Groups. Copy the corresponding Object IDs of the groups you wish to assign and map to your SolarWinds organization and product.
2. In the Role Mapping section in SolarWinds, paste the Object ID according according to the mapped organization and product roles. 
3. Switch the toggle for Enable Role Mapping.

 

 

Step 7: Test the SSO authentication.