Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

If your organization integrates applications with Azure AD, you can manage those applications in EmpowerID. This includes onboarding applications, assigning users to application roles, editing applications, and deleting applications. For onboarding applications, EmpowerID provides two options that can you can use depending on your organization’s policies:

  1. You can require any onboarding of Azure applications to go through an approval process before those applications are created in Azure

  2. You can allow applications to be onboarded without requiring any approvals.

In this article, you create a test application for your Azure AD tenant in EmpowerID without requiring requiring approvals and verify the that application in Azure.

Easy html macro
theme{"label":"solarized_dark","value":"solarized_dark"}
contentByMode{"html":"<!doctype html>\r\n<link href=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css\" rel=\"stylesheet\" integrity=\"sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC\" crossorigin=\"anonymous\">\r\n<link href=\"https://docs.empowerid.com/new_docs.css\" rel=\"stylesheet\">\r\n<script src=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js\" integrity=\"sha384-MrcW6ZMFYlzcLA8Nl+NtUVF0sA7MsXsP1UyJoMp4YLEuNSfAP+JcXn/tWtIaxVXM\" crossorigin=\"anonymous\"></script>\r\n <div class = \"bd-callout bd-callout-info\">\r\n <h4>Prerequisites</h4>\r\n <p>To add an enterprise application to Azure, you need:</p>\r\n <ul>\r\n <li>An Azure AD tenant managed by EmpowerID</li>\r\n <li>One of the following Azure roles linked to the Service Principal EmpowerID uses to connect to Azure: Global Administrator, Cloud Application Administrator, or Application Administrator.</li>\r\n </ul>\r\n </div>","javascript":"","css":""}

Onboard an

...

application without approvals

  1. Navigate to the portal for the IT Shop in your environment.

  2. Select Applications and click Onboard Azure Application.

  3. The Create Azure Application wizard opens to assist you with onboarding an Azure application. Applications that you can integrate include Non-gallery Enterprise Applications (SAML), Gallery Enterprise Applications (SAML), and OIDC applications. In this example, OIDC application registration is being selected.

  4. Select the Application Environment. It is recommended that you select an non-production environment for initial testing.

  5. Select a tenant for the application.

  6. Select a Location in EmpowerID. Default Organization is selected by default; if you wish to change this, click the link and then search for and select the desired location from the Location tree.

  7. Click Next.

  8. Give the application and Name and Description and then click Next.

    Image RemovedImage Added

  9. Select an Application Owner and one or more Deputies and then click Next.

    Insert excerpt
    IL:Bootstrap Wildcard Callout
    IL:Bootstrap Wildcard Callout
    nameAzureApplicationOwners
    nopaneltrue

  10. Review the information and click Next.

    You should see that the application was successfully created in Azure.

  11. Click Submit to exit the wizard.

Insert excerpt
IL:External Stylesheet
IL:External Stylesheet
nopaneltrue

Verify the application in Azure

  1. Log in to your Azure portal and navigate to Azure AD > Enterprise applications.

  2. Select All Applications as the Application type and then search for the application you just created.

    You should see the application.

  3. Click the Name link for the application to navigate to the Overview blade for the app.

  4. Under Manage, click Owners.

    You should the Application owner and any deputies you specified for the application when you created in EmpowerID.

...