Skip to main content

Configure OneView single-sign on with Azure AD

The following article assists Identity Provider (IDP) Administrators with configuring single sign-on (SSO) for OneView with Azure AD. OneView only supports the SAML 2.0 authentication protocol. For more information, see Configure single sign-on with OneView.

Configure the application SSO settings

  1. In Azure AD's Set up Single Sign-On with SAML screen, go to Basic SAML Configuration > click the Pencil icon.
  2. Copy the Service Provider Entity ID from OneView and add it as the Identifier (Entity ID). 
  3. In Azure AD, add the following URLs as Reply URL (Assertion Consumer Service URL):
  4. Click the Save button.

Configure attributes

  1. In Azure AD's Set up Single Sign-On with SAML screen, go to User Attributes & Claims > click the Pencil icon.
  2. Click Add new claim.
  3. Change the value of the Unique User Identifier (Name ID) to user.mail.
    mceclip1.png
  4. Add additional claims as lowercase, exactly as shown below.
    mceclip2.png
  5. Click Save.

Link Azure AD metadata with OneView

Use one of the following methods to connect the metadata with OneView

Metadata URL

  1. Copy the Azure AD App Federation Metadata Url.
  2. In the OneView Single Sign-On page, paste the Metadata URL under Identity Provider (IDP) Metadata.
  3. Set Enable Single Sign-On (SSO) to ON.
  4. In the top right, click Save.

Metadata XML

  1. Download the Azure AD Federation Metadata XML file.
  2. In the OneView Single Sign-On page, choose Metadata XML.
  3. Drag the .xml file or click Or Select A File to upload the IDP Metadata.
  4. Set Enable Single Sign-On (SSO) to ON.
  5. In the top right, click Save.

Related articles