This articles explains the procedure to add Mircsoft Azure as SSO IdP.

Here are the steps to add Microsoft Azure as SSO IdP with SDC:

• Create a user role on the SDC with the required permissions from under SDC >> Administration >> Users and Roles >> Roles. For example: firewall_admin.
• Now, add this role to a user on the SDC >> Administration >> Users and Roles >> Users. When creating the user, select the User Type as SSO.
• In the SDC, now configure the SSO from under SDC >> Administration >> SSO >> select the default SSO role.
• The default role will be applied to any user which does not have any other custom role defined on the IdP side for SDC users.
• On Azure side, the following config needs to be done:
•  First navigate to AdditionalClaims and add the following:
  • 
  • Ensure that the claim name "role" has the value "user.assignedroles". Please note that these are case sensitive.
• Next step is to create the App Role.
  • Navigate to App Registration (Under All Applications).
  • Select your Application 
  • Create the App Role by clicking on Create user.
  • Select the user.
  • Select the role. Please note that the role name should be the same name as the role defined on the SDC with the prefix "sdc_"
  • Example: If the role name on SDC is "firewall_admin", the role name and value on the Azure side should be "sdc_firewall_admin".
  • Enable the role and save it on Azure.
• Now, select this role name for the user/group on the Azure side.