KB483961: How to configure Azure SSO with MicroStrategy Web in MicroStrategy 2019

Sana Hidayat

Director, Cloud Support Operations • MicroStrategy

This article will walk you through the steps on how to configure Azure SSO with MicroStrategy Web 2019.

Navigate to the SAML Configuration page for Strategy Web. Go to the following URL and generate the configuration files: https://webserver:8080/MicroStrategy/saml/config/open.
Record the value of the Entity ID. You can do so by going to the following URL:
https://webserver:8080/MicroStrategy/saml/SSO.
This is the Entity base URL: https://webserver:8080/Strategy
In my case, I have a proxy, so my Behind the Proxy setting will be set to Yes.

Make sure the Admin Group is the name of the group created in Azure. This is the group that will have access to the Strategy Administrator page.

Log into the Azure SSO portal: https://portal.azure.com/#home.
From the navigation panel, locate Azure Active Directory > Enterprise applications.

Navigate to All applications > Categories > Add an application.
Give your application a name.

In the properties of the new application, select No for the Visible to user setting.

,/p>
Add your group of users for the application.

Click Single sing-on under the Manage section.
Note: The entity ID is from your SP metadata in step three.

Modify claim to send samaccountname. The Unique User Identifier is user.onpremisessamaccountname.

Download IDPMetadata from Azure

Copy the downloaded metadata to the Strategy Web folder: /webapps/MicroStrategy/WEB-INF/classes/resources/SAML
Add your new application to the conditional access policy in the Azure Active Directory

Log into the Strategy Web Administrator page: https://Webserver:8080/MicroStrategy/servlet/mstrWebAdmin.
Select Custom SSO and uncheck Show log in page after user logout.

Configure trusted relationship. If you have two web nodes, you will be configuring the trusted relationship through each node individually, and not the load balancer URL.

Create a copy of the web.xml and modify:
/webapps/MicroStrategy/WEB-INF/web.xml

uncomment this section:

</context-param>^M	    <!-- Uncomment fragment below to enable SAML Authentication mode-->	    <context-param>	        <param-name>contextConfigLocation</param-name>	        <param-value>classpath:resources/SAML/SpringSAMLConfig.xml</param-value>	    </context-param>		    <context-param>

Sample:

[ISERERNAME WEB-INF]$ cat web.xml	    <!-- Uncomment fragment below to enable SAML Authentication mode-->	    <context-param>	        <param-name>contextConfigLocation</param-name>	        <param-value>classpath:resources/SAML/SpringSAMLConfig.xml</param-value>	    </context-param>		    <context-param>	        <param-name>contextInitializerClasses</param-name>	        <param-value>com.Strategy.auth.saml.config.ConfigApplicationContextInitializer</param-value>	    </context-param>		    <filter>	        <filter-name>springSecurityFilterChain</filter-name>	        <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>	    </filter>	    <filter-mapping>	        <filter-name>springSecurityFilterChain</filter-name>	        <url-pattern>/servlet/*</url-pattern>	    </filter-mapping>	    <filter-mapping>	        <filter-name>springSecurityFilterChain</filter-name>	        <url-pattern>/saml/*</url-pattern>	    </filter-mapping>		    <listener>	        <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>	    </listener>

Restart the Web server. You should now be be able to use Azure SSO with MicroStratey Web

Comment

0 comments

Details

Knowledge Article

Published:

January 8, 2020

Last Updated:

January 8, 2020

</context-param>^M  <context-param> <param-name>contextConfigLocation</param-name> <param-value>classpath:resources/SAML/SpringSAMLConfig.xml</param-value> </context-param> <context-param>

[ISERERNAME WEB-INF]$ cat web.xml  <context-param> <param-name>contextConfigLocation</param-name> <param-value>classpath:resources/SAML/SpringSAMLConfig.xml</param-value> </context-param> <context-param> <param-name>contextInitializerClasses</param-name> <param-value>com.Strategy.auth.saml.config.ConfigApplicationContextInitializer</param-value> </context-param> <filter> <filter-name>springSecurityFilterChain</filter-name> <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class> </filter> <filter-mapping> <filter-name>springSecurityFilterChain</filter-name> <url-pattern>/servlet/*</url-pattern> </filter-mapping> <filter-mapping> <filter-name>springSecurityFilterChain</filter-name> <url-pattern>/saml/*</url-pattern> </filter-mapping> <listener> <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class> </listener>