How to config Foglight Integration with SAML 2.0 in Microsoft Entra ID (Azure AD) (4258669)

Part 1: Configure Microsoft Entra ID SAML 2.0 for your Foglight Server

1. Go to Enterprise applications within the Microsoft Entra ID Blade
2. Then click New Application
3. Then Create your own application
4. Give it a name and select Integrate any other application you don't find in the gallery (Non-gallery)
5. Click Create
6. After creating the application entry, click Assign users and groups to make sure some users are able to log in via SAML to Foglight
7. After assigning users to this application, click Get Started under Set up single sign on
8. Click SAML
9. (This step requires SAML 2.0 to be enabled explained in Part 2, steps 1 to 4) Download metadata.xml file from the Management Server in your environment using this URL https://[FMS_HOSTNAME]:8443/console/saml2/metadata.xml
10. Click on Upload metadata file and select the metadata.xml file downloaded on the previous step.
11. Edit the details so they look like the reference in the example screenshot (replace foglight.example.com with your FMS host)
12. Select an attribute to use as id (user.mail used as example) and save it for Part 2
13. Download the Certificate (Base64) and save it for Part 2
14. Copy Login URL, Microsoft Entra Identifier and Logout URL and save them for Part 2

For more details on configuring Single Sign-On on Azure, refer to Microsoft's documentation

Part 2: Configure Foglight

1. Log into Foglight with a user that has the Security role
2. Go to Administration | Users & Security
3. Select SAML 2.0 Integration Settings
4. Click Enable
5. Click Edit Settings
6. Fill the fields with the details obtained on Part 1, steps 12, 13 and 14 as seen in the example screenshot
7. Click Apply Configuration