SSO - Azure

Objective

In this document, you’ll learn how to configure Azure SSO integration to Volterra. For an overview of Volterra, visit About Volterra.


Prerequisites

Minimum


Configuration Steps

Step 1: Sign in to the Azure portal and click on your account and under the Directory list, choose the Active Directory tenant where you wish to register your application.

Step 2: In the Azure Active Directory pane, click on App registrations and choose New application registration.

Step 3: Enter a name for the application, for example 'volterra-oidc-test', choose account types as required and click register.

image7
Figure: Register Application

Step 4: Find the Application ID value and record it for later. You'll need it to configure the SSO section in Volterra Console.

image9
Figure: Retrieve Application ID

Step 5: Create a Client Secret from ‘Certificates & secrets’ tab and clicking New client secret‘’. Copy the client secret for configuring the SSO section in Volterra Console.

image3
Figure: Create Client Secret

Step 6: Login to Volterra Console with admin credentials, select ‘SSO’ from ‘IAM’ tab in the ‘system’ namespace and click on ‘Setup SSO’.

image4
Figure: Volterra SSO Setup Page

Step 7: Select Azure AD, provide ‘Client ID’ and ‘Client Secret’ obtained from above.

image1
Figure: Select Provider

image8
Figure: Client ID and Client Secret

Step 7: Well-known URL describes a metadata document that contains most of the information required for an app to perform sign-in. This includes information such as the URLs to use and the location of the service's public signing keys. The same can be obtained using:

https://login.microsoftonline.com/{tenant}/.well-known/openid-configuration

Step 8: Provide Well-known URL in the form above and select continue to obtain a Redirect URI

image5
Figure: Provision of Well-known URL

Step 9: From the Azure Active Directory pane, click on App registrations and choose the registered application above (volterra-oidc-test). Select ‘Add a Redirect URI’ and provide the URI obtained above to complete Azure SSO setup.

image2
Figure: Add Redirect URI Option

image6
Figure: Configure Redirect URI


Concepts


API References