• 03/07/2019
  • 5 minute de citit

In acest articol

In acest tutorial, veti afla cum sa integrati Skilljar cu Azure Active Directory (Azure AD). Integrarea Skilljar cu Azure AD va ofera urmatoarele avantaje:

  • Puteti controla in Azure AD cine are acces la Skilljar.
  • Puteti permite utilizatorilor sa se conecteze automat la Skilljar (Single Sign-On) cu conturile lor Azure AD.
  • Va puteti gestiona conturile intr-o singura locatie centrala – portalul Azure.

Daca doriti sa aflati mai multe detalii despre integrarea aplicatiei SaaS cu Azure AD, consultati Ce este accesul la aplicatie si conectarea simpla cu Azure Active Directory. Daca nu aveti un abonament Azure, creati un cont gratuit inainte de a incepe.

Conditii prealabile

Pentru a configura integrarea Azure AD cu Skilljar, aveti nevoie de urmatoarele elemente:

  • Un abonament Azure AD. Daca nu aveti un mediu Azure AD, puteti obtine o perioada de incercare de o luna aici
  • Abonament activat pentru conectare unica Skilljar

Descrierea scenariului

In acest tutorial, configurati si testati conectarea unica Azure AD intr-un mediu de testare.

  • Skilljar accepta SSO initiat de SP
  • Skilljar accepta aprovizionarea utilizatorilor Just In Time

Adaugarea Skilljar din galerie

Pentru a configura integrarea Skilljar in Azure AD, trebuie sa adaugati Skilljar din galerie la lista de aplicatii SaaS gestionate.

Pentru a adauga Skilljar din galerie, efectuati urmatorii pasi:

  1. In portalul Azure , in panoul de navigare din stanga, faceti clic pe pictograma Azure Active Directory .

  2. Navigati la Aplicatii Enterprise si apoi selectati optiunea Toate aplicatiile .

  3. Pentru a adauga o aplicatie noua, faceti clic pe butonul Aplicatie noua din partea de sus a casetei de dialog.

  4. In caseta de cautare, tastati Skilljar , selectati Skilljar din panoul de rezultate, apoi faceti clic pe butonul Adaugare pentru a adauga aplicatia.

Configurati si testati conectarea unica Azure AD

In aceasta sectiune, configurati si testati conectarea unica Azure AD cu Skilljar pe baza unui utilizator de testare numit Britta Simon . Pentru ca conectarea unica sa functioneze, trebuie stabilita o relatie de legatura intre un utilizator Azure AD si utilizatorul asociat din Skilljar.

Pentru a configura si testa Azure AD single sign-on cu Skilljar, trebuie sa completati urmatoarele blocuri:

  1. Configurati Azure AD Single Sign-On – pentru a permite utilizatorilor dvs. sa utilizeze aceasta caracteristica.
  2. Configure Skilljar Single Sign-On – pentru a configura setarile Single Sign-On din partea aplicatiei.
  3. Creati un utilizator de testare Azure AD – pentru a testa conectarea unica Azure AD cu Britta Simon.
  4. Atribuiti utilizatorului de testare Azure AD – pentru a permite Britta Simon sa utilizeze conectarea unica Azure AD.
  5. Create Skilljar test user – to have a counterpart of Britta Simon in Skilljar that is linked to the Azure AD representation of user.
  6. Test single sign-on – to verify whether the configuration works.

In this section, you enable Azure AD single sign-on in the Azure portal.

To configure Azure AD single sign-on with Skilljar, perform the following steps:

  1. In the Azure portal, on the Skilljar application integration page, select Single sign-on.

  2. On the Select a Single sign-on method dialog, select SAML/WS-Fed mode to enable single sign-on.

  3. On the Set up Single Sign-On with SAML page, click Edit icon to open Basic SAML Configuration dialog.

  4. On the Basic SAML Configuration section, perform the following steps:

    a. In the Sign on URL text box, type a URL using the following pattern: https://<companyname>.skilljar.com/

    b.

    pprno sin bragas en la calle
    me follo a mi tia porno rspañol
    supertetas incestos gays
    porno hablado español videos de lucio saints
    maduras españolas sexo recopilacion pajas
    lesbianas incesto venezolanas desnudas
    pillados follando española viciosa
    todoporno forzadas a follar
    chochitos jovenes jovencitas pilladas masturbandose
    sexo gratis incesto madre española follando con su hijo
    p0rno shemalehd
    pareja española follando vidio pirno
    incesto xxx maduras lesbianas tetonas
    viejas muy calientes abuela enculada
    parejitas españolas follando pareja follando en la playa
    tetona amateur xxxgay
    peliculas porno de incesto gratis incestos jovencitas
    xxx prostitutas mujeres fornicando
    porno canario bbw abuelas
    pajas trans madres que se follan a sus hijos

    In the Identifier (Entity ID) text box, type a URL using the following pattern: https://<companyname>.skilljar.com/

    Note

    These values are not real. Update these values with the actual Sign on URL and Identifier. Contact Skilljar Client support team to get these values. You can also refer to the patterns shown in the Basic SAML Configuration section in the Azure portal.

  5. On the Set up Single Sign-On with SAML page, in the SAML Signing Certificate section, click Download to download the Federation Metadata XML from the given options as per your requirement and save it on your computer.

  6. On the Set up Skilljar section, copy the appropriate URL(s) as per your requirement.

    a. Login URL

    b. Azure AD Identifier

    c. Logout URL

Configure Skilljar Single Sign-On

To configure single sign-on on Skilljar side, you need to send the downloaded Federation Metadata XML, and Name Identifier Format Value – urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress to Skilljar support team. They set this setting to have the SAML SSO connection set properly on both sides.

The objective of this section is to create a test user in the Azure portal called Britta Simon.

  1. In the Azure portal, in the left pane, select Azure Active Directory, select Users, and then select All users.

  2. Select New user at the top of the screen.

  3. In the User properties, perform the following steps.

    a. In the Name field enter BrittaSimon.

    b. In the User name field type [email protected]

    For example, [email protected]

    c. Select Show password check box, and then write down the value that’s displayed in the Password box.

    d. Click Create.

In this section, you enable Britta Simon to use Azure single sign-on by granting access to Skilljar.

  1. In the Azure portal, select Enterprise Applications, select All applications, then select Skilljar.

  2. In the applications list, select Skilljar.

  3. In the menu on the left, select Users and groups.

  4. Click the Add user button, then select Users and groups in the Add Assignment dialog.

  5. In the Users and groups dialog select Britta Simon in the Users list, then click the Select button at the bottom of the screen.

  6. If you are expecting any role value in the SAML assertion then in the Select Role dialog select the appropriate role for the user from the list, then click the Select button at the bottom of the screen.

  7. In the Add Assignment dialog click the Assign button.

Create Skilljar test user

In this section, a user called Britta Simon is created in Skilljar. Skilljar supports just-in-time user provisioning, which is enabled by default. There is no action item for you in this section. If a user doesn’t already exist in Skilljar, a new one is created after authentication.

Test single sign-on

In this section, you test your Azure AD single sign-on configuration using the Access Panel.

When you click the Skilljar tile in the Access Panel, you should be automatically signed in to the Skilljar for which you set up SSO. For more information about the Access Panel, see Introduction to the Access Panel.

Additional Resources

  • List of Tutorials on How to Integrate SaaS Apps with Azure Active Directory

  • What is application access and single sign-on with Azure Active Directory?

  • What is Conditional Access in Azure Active Directory?