Skip to main content
crich2784
Level 6
August 10, 2023
解決済み

Azure AD app registration and AEM authentication

  • August 10, 2023
  • 2 の返信
  • 3098 ビュー

Hello,

 

We have a need to register an Enterprise application (and an application) in Azure AD and configure AEM to use it.  If it is supported by community efforts, that's fine too.  I am ok with trying SAML too however, the instructions online are outdated.  Azure has changed a lot since the instructions were written.

 

Can anybody point me to documentation where I can accomplish this?

 

Thanks,

Charles

このトピックへの返信は締め切られました。
ベストアンサー sherinregi-1

Hi @crich2784 ,

 

To start with you can go to the azure portal and create your application under the tenant you are planning to communicate(B2B / B2c). AEM support only SAML integration as per my knowledge so you need to setup the SAML configuration on the app and generate the certificate which you will have to install in AEM. Once you add the cert on the trust store you can configure the Adobe Granite SAML 2.0 Authentication Handler . All the required information like IDP url is available on the azure app portal. 

Once its completed we can validate the scenarios based on Signin URL based on which the login flow will be triggered and SAMLResponse will posted back to /content/saml_login

 

You can refer the below link which will give some idea to get started but still might need tweaking based on you use cases

https://learn.microsoft.com/en-us/azure/active-directory/saas-apps/adobeexperiencemanager-tutorial

 

 

 

2 の返信

sherinregi-1
Community Advisor
Community Advisor
August 11, 2023

Hi @crich2784 ,

 

To start with you can go to the azure portal and create your application under the tenant you are planning to communicate(B2B / B2c). AEM support only SAML integration as per my knowledge so you need to setup the SAML configuration on the app and generate the certificate which you will have to install in AEM. Once you add the cert on the trust store you can configure the Adobe Granite SAML 2.0 Authentication Handler . All the required information like IDP url is available on the azure app portal. 

Once its completed we can validate the scenarios based on Signin URL based on which the login flow will be triggered and SAMLResponse will posted back to /content/saml_login

 

You can refer the below link which will give some idea to get started but still might need tweaking based on you use cases

https://learn.microsoft.com/en-us/azure/active-directory/saas-apps/adobeexperiencemanager-tutorial

 

 

 

crich2784
crich2784作成者
Level 6
August 11, 2023

Thank you for the reply.  Yes, I did dig into the documentation and set up SAML authentication successfully.  I heard that OAuth can be set up with Community support so I'm looking into that.  At least,  I have a path forward with SAML for now.

 

Now I have another security question which I will post in the AEM Forms 

https://experienceleaguecommunities.adobe.com/t5/adobe-experience-manager-forms/sso-and-securing-a-form/m-p/611942#M11147

 

 

Thanks again,

Charles