search

MicrosoftDocs / azure-docs

Open source documentation of Microsoft Azure
https://docs.microsoft.com/azure
Creative Commons Attribution 4.0 International
10.28k stars 21.45k forks source link

Feedback for this page #114243

Closed DomenicTroilo closed 9 months ago

DomenicTroilo commented 1 year ago

It appears this Tutorial is out of date with the current Appian SSO configuration. They now REQUIRE "Token Encryption" As per their documentation the SAML assertions are now encrypted.

https://docs.appian.com/suite/help/23.3/SAML_for_Single_Sign-On.html#service-provider-entity-id

Note below from linked documentation:

To configure Appian to work with SAML, you will need:

A SAML identity provider using SAML 2.0, and SHA-1 or SHA-256 signature method algorithms. Appian supports signed, encrypted SAML assertions up to the AES-256 standard. In order to make use of this capability, the Appian environment must be running on an Appian Cloud instance. Otherwise, self-managed Appian environments will need to be running OpenJDK 8 or have the JCE security jar installed for the Oracle Java JDK.

PEM-formatted certificate for signing (contains a private key that should be trusted by your IdP). This certificate is only used for signing SAML assertions that come from the Appian instance you upload it to. The certificate does not need to be associated with your site's domain. Once you have uploaded the certificate, you will not be able to download later. The private key in the certificate should not be encrypted. Appian will encrypt the private key when the certificate is uploaded. We ask you to provide the certificate because Appian cannot automatically generate a certificate that will be guaranteed to be accepted by your identity provider. You can create one yourself, or obtain one from a third-party certificate authority. For more information, see How to Create a Self-Signed Certificate for SAML Authentication.

Document Details

⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

SaibabaBalapur-MSFT commented 1 year ago

@DomenicTroilo Thanks for your feedback! We will investigate and update as appropriate.

SaibabaBalapur-MSFT commented 1 year ago

@@jeevansd Can you please check and add your comments on this doc update request as applicable.

SaibabaBalapur-MSFT commented 1 year ago

@DomenicTroilo I'm going to assign this to the document author so they can take a look at it accordingly.

v-hgampala commented 9 months ago

Suggested in the document to enable the "Token Encryption" for encrypted SAML assertions.

please-close