Skip to main content

Set up Nebula single sign-on with Microsoft AD FS

The following instructions will assist the iDP Administrator with the setup of single sign-on (SSO) for Malwarebytes Administrators into the Malwarebytes Nebula platform using Microsoft AD FS. Nebula only supports SAML 2.0 authentication protocol.

Get started

  • The email address used for the Nebula account must match the email address used for AD FS.
  • Administrator access to the Malwarebytes Nebula.
  • Server Manager Administrators access, or equivalent, on the local computer.
  • Ensure your environment meets the minimum operating system and external access requirements. Refer to Nebula platform Administrator Guide for details.
  • Ensure that the time set on the AD FS server is not set to a future time. 

Add new relying party trust to AD FS configuration database

  1. In Server Manager, select Tools > AD FS Management > Actions > click the Start button.
    DOC-2959-1.png
  2. Log in to Malwarebytes Nebula and go to Configure > Single Sign-on. Download the Malwarebytes Service Provider Metadata.
    DOC-2959-2.png
  3. Back in AD FS, select Import data about the relying party from a file > Browse... to locate and add the Malwarebytes metadata.xml file > click Next.
    DOC-2959-3.png
  4. Create a display name for the application that your users can easily identify. For example, Malwarebytes Nebula. Click Next when satisfied.
    DOC-2959-4.png
  5. Select I do not want to configure multi-factor authentication settings for this relying party trust at this time > click Next.
    DOC-2959-5.png
  6. Select Permit all users to access this relying party > click Next.
    DOC-2959-6.png
  7. Select Open the Edit Claim Rules dialog for this relying party trust when the wizard closes > click Close.
    DOC-2959-7.png
  8. Select Add Rule... in the new dialog screen.
    DOC-2959-8.png
  9. Select Send LDAP Attributes as Claims from the drop down menu > click Next.
    DOC-2959-9.png
  10. Create a Claim rule name > configure the following LDAP attributes:
    E-Mail Addresses to Outgoing Claim Type: email
    E-Mail Addresses to Outgoing Claim Type: nameid
    DOC-2959-10.png
  11. Download the FederationMeta.xml from: https://YourADFSServer/federationmetadata/2007-06/federationmetadata.xml
    NOTE: Replace YourADFSServer with your ADFS server information.
  12. In the Nebula platform, upload the FederationMetadata.xml into cloud.malwarebytes.com by dragging the file into the area, or selecting the file path.
  13. Toggle Enable Single Sign-On (SSO) to ON > click SAVE to complete the integration process.

Related articles