Reference Guide
...
SAML Authentication
Azure AD Configuration
Azure AD Configuration for Multitenancy
Azure AD SAML feature is also supported for multitenant environments.
For this, some parameters in the Kron PAM Application created on the Azure side must be edited according to Tenants previously created in Kron PAM.
For Host:
- Go to the newly created Kron PAM Application.
- Choose Single Sign-on on the left pane.
- Choose SAML.
- Click edit for Basic SAML Configuration.



For Tenant:
- Go to the newly created Kron PAM Application.
- Choose Single Sign-on on the left pane.
- Choose SAML.
Click edit for Basic SAML Configuration.



The SAML configuration parameters on the Kron PAM side and the TomcatCorsFilter configurations under /pam/gui/conf/web.xml will be the same as the information under the Azure AD Configuration heading.
To enable different methods option on Multitenant environments, this parameter must be set on System Configuration Manager:
- Open Administration > System Configuration Manager > Add New System Parameter.
- Add aioc.login.different.methods.enabled as true.