Azure SSO

This pages describes configuring Lenses with Azure SSO.

Groups are case-sensitive and mapped by UUID with Azure

Integrate your user-groups with Lenses using the Azure group IDs. Create a group in Lenses using the UUID as the name.

For example, if the Engineers group has the UUID ae3f363d-f0f1-43e6-8122-afed65147ef8, create a group with the same name.

Set up Microsoft Azure SSO

Learn more about Azure SSO

Add from Azure app-gallery

1. Go to Enterprise applications > + New Application

2. Search for Lenses.io in the gallery directory

3. Choose a name for Lenses e.g. Lenses.io and click Add

4. Select Set up single sign on > SAML

5. Configure the SAML details

Setting	Value
Identifier (Entity ID)	Use the base url of the Lenses installation e.g. https://lenses-dev.example.com
Reply URL	Use the base url with the callback details e.g. https://lenses-dev.example.com/api/v2/auth/saml/callback?client_name=SAML2Client
Sign on URL	Use the base url

6. Download the Federation Metadata XML file with the Azure IdP details. You will reference this file’s path in the Lenses security.conf configuration file.

security.conf

lenses.security.saml.base.url="https://lenses-dev.example.com"
lenses.security.saml.idp.provider="azure"
lenses.security.saml.idp.metadata.file="/path/to/AzureIDPMetadata.xml"
lenses.security.saml.keystore.location="/path/to/keystore.jks"
lenses.security.saml.keystore.password="my_keystore_password"
lenses.security.saml.key.password="my_saml_key_password"