Set Up Azure for Censys SAML Authentication
Follow this guide to enable SSO with Azure Active Directory as your Identity Provider for Censys authentication.
This is one part of a two-part process to configure SAML-based authentication for people on your Censys team.
In order to successfully complete this setup, you must have the "Use SAML" checkbox selected on the Censys Team Authentication page. Information necessary to this setup guide is present in the SP Details section.
Add Censys as an SSO-enabled application
-
Log into Azure Active Directory and select the Azure Active Directory service.
-
On the left-hand navigation, select Enterprise Applications.
-
In the menu bar near the top of the page, select New Application.
applications_new.png[]
-
Again in the menu bar near the top of the page, select Create your own application.
-
In the modal that pops up, name the app Censys.
For the app purpose, select the radio button that says, Integrate another application not found in the gallery (Non-gallery)
Click the Save button.
-
From the Overview page, underneath the "Getting Started" section, click the Set up single sign on card.
-
On the next page, choose SAML for the single sign-on method.
-
On the SAML Setup page, provide information about the Censys application:
-
For the Identifier field, copy the Entity ID URL from the SP Details section of the Censys Authentication page.
-
For the Reply URL field, paste the Assertion Consumer Service URL from the SP Details section of the Censys Authentication page.
-
Leave the "Sign Authentication Requests" checkbox selected.
Click the Save button.
-
-
In the Attribute & Claims section, double-check that the following claims are present:
-
Required Claim:
-
Name:
nameidentifierName identifier format: Email Address
Source: Attribute
Source attribute:
user.userprincipalname
-
-
Additional Claims:
-
Name: givenname
Namespace: http://schemas.xmlsoap.org/ws/2005/05/identity/claims
Source: Attribute
Source attribute:
user.givenname -
Name: surname
Namespace: http://schemas.xmlsoap.org/ws/2005/05/identity/claims
Source: Attribute
Source attribute:
user.surname
Click Save.
-
-
Assign Users
-
From the Overview page, click the Assign users and groups card.
-
Select the people or groups who should have access to Censys.
Up Next
With Azure configured to authenticate Censys users, it’s time to configure Censys for SAML authentication.
Copy the App Federation Metadata URL on the "SAML Signing Certificate" card in the Single Sign On settings of your newly configured enterprise application for one-click setup on the Censys side.
Comments
0 comments
Please sign in to leave a comment.