getsentry / sentry-auth-saml2

SAML2 SSO provider for Sentry
Apache License 2.0
19 stars 19 forks source link

saml2 with MS Azure #35

Closed brogger71 closed 5 years ago

brogger71 commented 6 years ago

Hello,

I used the generic SAML2 module to connect our on-premise deployment with MS Azure AD. I can use the Metadata provided by Microsoft, but it's not clear to me, which replay URLs i have to provide. In the sentry.io docu i read, that the following URLs are to be used for the Cloud deployment:

ACS: https://sentry.io/saml/acs/{organization_slug}/ SLS: https://sentry.io/saml/SLS/{organization_slug}/ Metadata: https://sentry.io/saml/metadata/{organization_slug}/

I adapted them to our deployment but it didn't work. Any ideas?

Thanks, Michael

evanpurkhiser commented 6 years ago

@ndmanvar have you used MS Azure AD before? I seem to recall us fiddling with this at one point

brogger71 commented 6 years ago

@EvanPurkhiser can you point me in a direction so i can investigate further?

Thanks

evanpurkhiser commented 6 years ago

Would you be able to describe more about what exactly didn’t work? How did you map your attributes?

ndmanvar commented 6 years ago

saml-azure-adfs

Yep, @EvanPurkhiser

brogger71 commented 6 years ago

@ndmanvar your vid was extremly helpful, thank you! I could succesfully config SAML2 with MS Azure AD. But mistakenly i linked my personal account with the sentry admin account while config SAML2. Is there an easy way to SSO unlink accounts?

ndmanvar commented 6 years ago

@brogger71 glad you found the GIF useful!

The best/easiest way is to remove SSO/SAML2 and reconfigure it with the appropriate account (non-personal). Hope that helps.