This article links to instructions you can use to set up single sign-on (SSO) between Microsoft Azure Active Directory (AD) and Cloud Academy or QA. When you set up this integration, you use Azure AD to authenticate and manage Cloud Academy or QA users. This feature is available to enterprise accounts. You must be an admin to access the screen in the application where you perform this procedure.

Note: This article contains different URLs to use in your configuration depending on whether you are using Cloud Academy or QA. When you see both options, choose the URL that corresponds to the kind of account you use.

This article contains the following sections:

• Azure AD SSO Tutorial
• Setting Up Single Sign-on
• Community Tips

Azure AD SSO Tutorial

Microsoft has provided a tutorial on how to set up your integration between Azure AD. You can get to the tutorial on the Settings & Integrations screen. To get to this screen from the dashboard, click your company name in the upper-right corner and choose Settings & Integrations from the menu that appears.

The Settings & Integrations screen appears. Click the Integrations tab, and then click the Azure AD card.

A page in the Azure Marketplace appears with an overview of the Cloud Academy SSO integration. Click the GET IT NOW button under the Cloud Academy logo on the left to open the tutorial.

Alternately, you can go directly to the tutorial by clicking this link:
Tutorial: Azure Active Directory single sign-on (SSO) integration with Cloud Academy - SSO

Setting Up Single Sign-on

You complete some steps of the tutorial within the Azure portal. Other steps you complete within Cloud Academy/QA. The Cloud Academy/QA steps occur on the Settings & Integrations screen described earlier in this article.

When you complete the steps in the tutorial, you choose the SSO card on this screen, rather than the Azure AD card that you used to access the tutorial.

For more information about setting up single sign-on in Cloud Academy/QA, see Setting Up Single Sign-on.

c:[Type == "http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname", Issuer == "AD AUTHORITY"]

=> issue(store = "Active Directory", types = ("http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn", "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress", "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname", "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname"), query = ";objectSID,mail,givenName,sn;{0}", param = c.Value);