Azure AD Configuration

log in to azure active directory with a user who has the required administrative rights and follow the below steps to create a kron pam application for saml sso new application create your own application give a name for kron pam go to the newly created kron pam application choose single sign on on the left pane choose saml click edit for basic saml configuration enter the information below according to the kron pam information note that the ip address of the kron pam app will change according to your environment go to step 3 for saml certificates download the certificate (base 64) and open it via notepad then copy it inside the notepad we will paste it to the saml configuration on kron pam as saml x509 certf key go to step 4 for kron pam configurations we will copy the above configurations and paste them as the kron pam saml configuration the logout url in azure will be pasted as the login remote url in the saml configuration the azure ad identifier will be pasted as saml entity id in saml in the saml configuration go to kron pam properties copy the user access url and paste it as the saml url in the kron pam saml configuration finally, enter the azure portal url ( https //aad portal azure com ) as the saml remote url in the saml configuration in kron pam at the end of the configuration, the singe connect screen below will be displayed after setting to the required configurations, you need to edit tomcatcorsfilter in the tomcat configuration make an ssh to kron pam server after setting the required configurations, you need to edit tomcatcorsfilter in the tomcat configuration make an ssh to the kron pam server open the web xml file under the following directory /u01/netright tomcat/conf find tomcatcorsfilter part and add \<filter name>tomcatcorsfilter\</filter name>\<filter class>org apache catalina filters corsfilter\</filter class> \<init param> \<param name>cors allowed origins\</param name> \<param value>https //login microsoftonline com\</param value> \</init param> to test the sso go to the application on azure and click single sign on on the left pane then go to step 5, and click the button test button a new, left side page will open to ask for the user who will log in to the application if this user exists in the kron pam application, you will log in with no need for credentials