Documentation forSolarWinds Service Desk

Azure Active Directory 
Configuration and User Provisioning

Detailed steps are below to help you with:

Configuration

To configure Azure with your SolarWinds Service Desk account you will need to access both Azure Service Portal and the SolarWinds Service Desk App.

You can use the video tutorial or the instructions below to guide you through setup, including SSO.

Step 1 - Add the SolarWinds App to your Azure Active Directory

  1. Open Azure Portal.
  2. Navigate to Azure Active Directory, and then click Enterprise Apps.
  3. Click New Application, and then search for SolarWinds Service Desk.
  4. Select the SolarWinds Service Desk App, and then click Add.

Step 2 - Basic SAML Configuration in Azure

  1. In the SolarWinds Service Desk application within Azure, click Single Sign-On.
  2. Select SAML.
  3. In the Basic SAML Configuration section click on the pencil icon.
  4. Enter the requested information:
    1. Identifier: SolarWinds.com
    2. Reply URLs

      1. https://[ACCOUNTNAME].samanage.com/saml/[ACCOUNTNAME]

      2. https://app.samanage.com/saml/[ACCOUNTNAME]

    3. Sign on URL: https://[ACCOUNTNAME].samanage.com/saml_login/[ACCOUNTNAME]

  5. Click Save.

  6. Copy the link in Section 4 of Azure.
  7. Click Save.
  8. If you are using Domain Mapping, add a reply URL using your custom domain. For example: https://[customdomain]/saml/[account name].

  9. If you are configuring SSO prior to completing User Provisioning, disable User Assignment Required within the Properties menu in the SolarWinds Service Desk enterprise app in Azure.

Step 3 - Final Setup: Azure Active Directory Configuration

  1. In Azure Active Directory, download the certificate (base 64) from the SAML Signing Certification section.
    Copy the Login and Logout URL (for later use).
  2. In SWSD navigate to the Setup Menu, and then select Account and Single Sign-On from the sub menu.
  1. Paste the Login URL you copied from Azure into the Azure Login URL field.

  2. In the Logout URL field, paste the Logout URL copied from Azure.
  3. Verify the Azure Identifier is Solarwinds.com.

  4. Paste the Azure certificate
    • Open the Certificate (Base 64) in a text editor.
    • Select All the text, copy, and then paste it into SolarWinds.
  5. If you wish to add additional users, select Create users if they do not exist.
    When this option is selected, if a user authenticates via SSO but is not a registered user in SWSD, the user will automatically be added with Requester permissions.
  6. Select Redirect to the saml login page when logging into SolarWinds Service Desk by default.

    During initial configuration and testing, Solarwinds recommends leaving this check box unmarked.
  1. Add users to the application:
    • In Azure, navigate to SolarWinds and click Users & Groups.
    • Click Add User, and add all users and/or groups that require the ability to log into SolarWinds.

User Provisioning

For quick, reliable, and secure User Provisioning, you will need to download the SolarWindsApplication in your Azure Portal. This video tutorial can be helpful, or you can follow the steps below.

Step 1 - Add the SolarWinds App to your Azure Active Directory

If you have already configured SWSD with Azure SSO, this step does not need to be repeated.

  1. Open Azure Portal.
  2. Navigate to Azure Active Directory, and then click Enterprise Apps.
  3. Click New Application, and then search for SolarWinds Service Desk.
  4. Select the SolarWinds Service Desk app, and then click Add.

Step 2 - Provisioning

In the Provisioning Mode field, select Automatic.

Step 3 - Administrator Credentials

  1. Add the Administrator credentials from your SWSD account.
    • Admin Username
    • Admin Token (get in SWSD by going to Setup > Users & Groups > [Your] User name > Actions > Generate JSON Web Token and enter as Secret Token when prompted in Azure)
  2. Select Test Connection to confirm credentials are correct, and optionally, enter your email address to receive an email notification.
  3. Optional: Select the check box to be notified if any failures occur.
  4. Click Save.

Step 4 - Mappings

Select Provision Azure Active Directory Users and review the source attributes that will map to your user's attributes in SWSD.

Site & Department names syncing from Azure must match the sites and departments loaded to SWSD in Setup > Account > Organization & Sites. If they do not match, users will fail to provision.

Step 5 - Settings

  1. In the Settings section, enable Provisioning Status to On.
  2. Click Save.

After you click Save, an initial synchronization will start, during which your user roles will pull over from SolarWinds.

Step 6 - Provisioning Users and Groups

  1. Click the Users and groups tab.
  2. Click Add User.
  3. Create a unique group for each of the different roles within SWSD to ensure anyone assigned to the group will be provisioned to the correct role.
  4. Select the group and role from the corresponding drop-down menu.
    Be aware that it can take several minutes for roles (example: Administrator, Service Agent, Requester) from SWSD to appear as available options for assigning users / groups to.
  5. Click Select to save changes.

After you have completed all steps for User Provisioning, SWSD can take a few hours to complete the full configuration and provisioning process.