Microsoft Entra ID
Microsoft Entra ID (formerly Azure Active Directory) is Microsoft’s cloud identity and access management service. Organisations use it to hold user accounts and groups, enforce sign-in policy such as multi-factor authentication, and control which applications those users can access. In this integration, Entra ID is the SAML identity provider: it authenticates users with their existing Microsoft credentials and issues the signed assertions that AxonOps Cloud accepts in place of a password login. The SAML overview describes how that exchange works.
Microsoft’s own documentation is authoritative for the Entra ID side of the integration:
- What is Microsoft Entra ID?: overview of the identity and access management service.
- Enable single sign-on for an enterprise application: the SAML single sign-on configuration flow in the Azure portal.
- Add app roles to an application: how app roles are defined and assigned to users and groups.
The guide
Section titled “The guide”Configuring Microsoft Entra ID as the identity provider is a three-part guide:
- 1. Create the Entra ID application: register a non-gallery enterprise application and set the Entity ID and Reply URL.
- 2. Configure app roles for AxonOps: create app roles carrying AxonOps role values and assign users and groups.
- 3. Configure SAML in the AxonOps console: upload the federation metadata, set the Entity ID and SP certificate, and verify sign-in.
The prerequisites for part 1 (an Entra ID tenant with a role permitted to create enterprise applications, the AxonOps organisation name, and SAML enabled for the organisation) are listed at the start of Create the Entra ID application.