If you want to setup Azure AD Connect, you can follow the steps from the link below.

If you already have Azure AD Connect in place or don’t want to setup Azure AD Connect, you can skip this chapter.

A running Unified Access Gateway, version 3.8 or higherĮven though it is not strictly necessary to have Azure AD Connect in place for this solution, it may be easier to sync your on-prem AD identities with Azure AD from, for instance, an administrative perspective.

A running Horizon environment, version 7.11 or higher.

Prerequisitesīefore continuing, I assume you already have the following in place.

Integrating Microsoft Azure MFA with VMware Unified Access Gateway 3.8, written by Sean Massey, Staff Cloud Solutions Architect at VMware.Ĭredits go the authors of these articles.Enabling SAML 2.0 Authentication for Horizon with Unified Access Gateway and Okta: VMware Horizon Operational Tutorial, written by Andreano Lanusse, End-User-Computing Staff Architect, Technical Marketing at VMware.If you'd like some individual support on this, reach out to us via or by using the in-app chat.This blog post describes the required steps for enabling SAML authentication for Horizon with Unified Access Gateway and Azure AD, including the configuration for integrating Horizon apps and desktops in existing (third-party) workspace portal solutions.īefore I start, I want to give a huge shout-out to the following people for pointing me to useful articles, and giving input and contributing to the solutions described in this blog post.įor the largest part, this blog post is based on two great already existing articles. The setup can not be done within Ardoq, and is entirely configured within the SSO provider.Ĭurrently, only the Azure Active Directory application (using SAML) supports role assignments from the Identity Provider 'out of the box' (more on that here). With SAML SSO you are able to optionally pass in an 'attribute' which indicates what role a user should be assigned.Īrdoq relies on our SSO providers for 2-factor authentication. If you want to manage user roles from the identity provider, choose SAML. `).Īrdoq supports SSO using the following protocols To enable SSO with Ardoq, our organization needs to be on a sub-domain (example. We'll quickly take you through the basics here. Luckily, there are several integration options with Ardoq. Facilitating Single Sign-on (SSO) across the organization makes work easy.

Netiq federation azure