Azure AD app registration and AEM authentication

[crich2784]

Hello,

We have a need to register an Enterprise application (and an application) in Azure AD and configure AEM to use it.  If it is supported by community efforts, that's fine too.  I am ok with trying SAML too however, the instructions online are outdated.  Azure has changed a lot since the instructions were written.

Can anybody point me to documentation where I can accomplish this?

Thanks,

Charles

[sherinregi · Accepted solution]

Hi @crich2784 ,

To start with you can go to the azure portal and create your application under the tenant you are planning to communicate(B2B / B2c). AEM support only SAML integration as per my knowledge so you need to setup the SAML configuration on the app and generate the certificate which you will have to install in AEM. Once you add the cert on the trust store you can configure the Adobe Granite SAML 2.0 Authentication Handler . All the required information like IDP url is available on the azure app portal. 

Once its completed we can validate the scenarios based on Signin URL based on which the login flow will be triggered and SAMLResponse will posted back to /content/saml_login

You can refer the below link which will give some idea to get started but still might need tweaking based on you use cases

https://learn.microsoft.com/en-us/azure/active-directory/saas-apps/adobeexperiencemanager-tutorial

[crich2784]

Thank you for the reply.  Yes, I did dig into the documentation and set up SAML authentication successfully.  I heard that OAuth can be set up with Community support so I'm looking into that.  At least,  I have a path forward with SAML for now.

Now I have another security question which I will post in the AEM Forms 

https://experienceleaguecommunities.adobe.com/t5/adobe-experience-manager-forms/sso-and-securing-a-f...

Thanks again,

Charles