Plugins - SAML - Azure steps


    Configuring SAML SSO with Azure Identity provider to XOA service provider.

    • Azure Configuration
      ---
    • Create a new application:
      • Navigate to: Azure Entra ID > Enterprise applications > New application > Create your own application.
      • Set the following:
        • Name: Xen Orchestra
        • Type: Non-gallery
      • Click Create.
    • Add yourself as a user:
      • Go to: Azure Entra ID > Enterprise applications > Xen Orchestra > Users and groups.
      • Add your user account.
    • Configure SAML:
      • Navigate to: Azure Entra ID > Enterprise applications > Xen Orchestra > Single sign-on > SAML.
      • Under Basic SAML Configuration, set:
        • Identifier (Entity ID): https://<XOA URL>/
        • Reply URL (Assertion Consumer Service URL): https://<XOA URL>/signin/saml/callback.

    • Xen-Orchestra Configuration
      ---
    • Enable SAML Plugin:
      • Navigate to: XO > Settings > Plugins.
      • Enable auth-saml.
    • Set up SAML Authentication:
      • Callback URL (callbackUrl):
        • Set to: https://<XOA URL>/signin/saml/callback.
      • Certificate:
        • Copy the contents of the Certificate (Base64) from:

          Azure Entra ID > Enterprise applications > Xen Orchestra > Single sign-on > SAML > SAML Signing Certificate.

      • Entry Point:
        • Copy the Login URL from:

          Azure Entra ID > Enterprise applications > Xen Orchestra > Single sign-on > SAML > Set up Xen Orchestra.

      • Issuer:
        • Copy the Application ID from:

          Azure Entra ID > Enterprise applications > Xen Orchestra > Properties.

      • Username field:
    Published