Mapping OIDC SSO Settings between an Azure IDP App and NetCloud Manager - manage-netcloud-access/Mapping-OIDC-SSO-Settings-between-an-Azure-IDP-App-and-NetCloud-Manager

Managing Identities and Access for NetCloud

NetCloud Feature
Management > Users
Security > NetCloud Access > Federated ID
ft:locale
en-US
ft:sourceName
Paligo_Prod
Document Type
Admin Guide
Configuration Guide

Use this section to see where settings from NetCloud Manager's SSO configuration go in an Azure app, and where settings from the Azure app go in NetCloud Manager's SSO configuration.

These steps assume you have an Azure IdP app ready to integrate with NetCloud Manager. And that you have navigated to the Add/Edit Identity Provider wizard in NetCloud Manager.

Table 4. 

Step

Screen Reference

The Redirect URI from the NetCloud Manager configuration goes in the Azure app's Redirect URI (optional) field on the app's registration page.

sso-azure-ncm-redirect-url.png
sso-azure-redirect-uri.png

The Client ID is listed in the Azure app's Overview page. The Client ID value goes in the NetCloud Manager integration's Client ID field.

sso-azure-client-id.png
sso-ncm-clientID.png

The Client Secret is listed on the Azure app's Client Secrets section. Note that the Client Secret may may need to be set in your app. The Client Secret value goes in the NetCloud Manager integration's Client Secret field.

sso-azure-client-secret.png
sso-ncm-client-secret.png

The Discovery Endpoint value uses the following form:

https://<your okta instance url>/oauth2/default/.well-known/openid-configuration

Replace the <your okta instance url> placeholder in the example with your own Okta instance URL.

The Discovery Endpoint value goes in the NetCloud Manager integration's Discovery Endpoint field.

Tip

The Discovery Endpoint can be tested by pasting it in a web browser. It should return a JSON object with information about the OIDC SSO integration.

sso-ncm-discovery-endpoint.png

The Azure app's Token configuration page allows for user attributes, or "claims", to be set. These claims uniquely identify users. For integrating an Azure IdP app with NetCloud Manager, the Azure claim names need to be mapped to the NetCloud Manager claim names.

Tip

If you need to add a claim for the Alias feature, use the Add optional claim button to add the claim.

sso-azure-token-config.png
sso-azure-ncm-claims.png