Skip to content

Update microsoft-entra-id.mdx #9103

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jan 16, 2025
Merged

Update microsoft-entra-id.mdx #9103

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
17 changes: 13 additions & 4 deletions docs/pages/product/workspace/sso/microsoft-entra-id.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -79,7 +79,7 @@ Download <Btn>Federation Metadata XML</Btn>:

## Complete configuration in Cube Cloud

Upload it to Cube Cloud through <Btn>Advanced Settings</Btn> tab on the [SAML
Upload the manifest file through the <Btn>Advanced Settings</Btn> tab on the [SAML
configuration page](#enable-saml-in-cube-cloud) in Cube Cloud:

<Screenshot src="https://ucarecdn.com/3ae24797-bd0a-477c-9b9a-420602694616/"/>
Expand All @@ -88,11 +88,20 @@ Select <Btn>SHA-256</Btn> as <Btn>Signature Algorithm</Btn>:

<Screenshot src="https://ucarecdn.com/e0c8c608-9b1e-4b84-a51e-0613362c6aec/"/>

Enter “[http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name](http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name)”
or a preferred attribute to lookup email address in <Btn>Attributes → Email</Btn>:
Enter the claim URI that corresponds to the user email address in <Btn>Attributes → Email</Btn>. This will vary based on your SAML configuration.

Examples:

`http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress`

`http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name`

<Screenshot src="https://ucarecdn.com/4fe50791-8203-49d4-9056-e5de6dc5643c/"/>

To map a role attribute from Entra ID to an identically-named role defined in Cube, add the claim URI corresponding to role to the Role field in Cube Cloud, similar to above. Note that Admin status cannot be set via SSO.

You can map the user's display name from Entra ID to Cube in the same manner.

Save settings on the Cube Cloud side.

## Final steps
Expand All @@ -108,4 +117,4 @@ and verify that the SAML integration now works for your Cube Cloud account:

Done! 🎉

[ext-ms-entra-id]: https://www.microsoft.com/en-us/security/business/identity-access/microsoft-entra-id
[ext-ms-entra-id]: https://www.microsoft.com/en-us/security/business/identity-access/microsoft-entra-id