/articles/active-directory/active-directory-saas-insperityexpensable-tutorial.md
Markdown | 272 lines | 148 code | 124 blank | 0 comment | 0 complexity | 3cd09f8f7583b02b05ed894c3ed7e2c1 MD5 | raw file
1<properties
2 pageTitle="Tutorial: Azure Active Directory integration with Insperity ExpensAble | Microsoft Azure"
3 description="Learn how to configure single sign-on between Azure Active Directory and Insperity ExpensAble."
4 services="active-directory"
5 documentationCenter=""
6 authors="jeevansd"
7 manager="femila"
8 editor=""/>
9
10<tags
11 ms.service="active-directory"
12 ms.workload="identity"
13 ms.tgt_pltfrm="na"
14 ms.devlang="na"
15 ms.topic="article"
16 ms.date="06/06/2016"
17 ms.author="jeedes"/>
18
19# Tutorial: Azure Active Directory integration with Insperity ExpensAble
20
21The objective of this tutorial is to show you how to integrate Insperity ExpensAble with Azure Active Directory (Azure AD).
22Integrating Insperity ExpensAble with Azure AD provides you with the following benefits:
23
24- You can control in Azure AD who has access to Insperity ExpensAble
25- You can enable your users to automatically get signed-on to Insperity ExpensAble (Single Sign-On) with their Azure AD accounts
26- You can manage your accounts in one central location - the Azure classic portal
27
28
29If you want to know more details about SaaS app integration with Azure AD, see [What is application access and single sign-on with Azure Active Directory](active-directory-appssoaccess-whatis.md).
30
31## Prerequisites
32
33To configure Azure AD integration with Insperity ExpensAble, you need the following items:
34
35- An Azure AD subscription
36- A Insperity ExpensAble single-sign on enabled subscription
37
38
39> [AZURE.NOTE] To test the steps in this tutorial, we do not recommend using a production environment.
40
41
42To test the steps in this tutorial, you should follow these recommendations:
43
44- You should not use your production environment, unless this is necessary.
45- If you don't have an Azure AD trial environment, you can get a one-month trial [here](https://azure.microsoft.com/pricing/free-trial/).
46
47
48## Scenario Description
49The objective of this tutorial is to enable you to test Azure AD single sign-on in a test environment.
50The scenario outlined in this tutorial consists of two main building blocks:
51
521. Adding Insperity ExpensAble from the gallery
532. Configuring and testing Azure AD single sign-on
54
55
56## Adding Insperity ExpensAble from the gallery
57To configure the integration of Insperity ExpensAble into Azure AD, you need to add Insperity ExpensAble from the gallery to your list of managed SaaS apps.
58
59**To add Insperity ExpensAble from the gallery, perform the following steps:**
60
611. In the **Azure classic portal**, on the left navigation pane, click **Active Directory**.
62
63 ![Active Directory][1]
64
652. From the **Directory** list, select the directory for which you want to enable directory integration.
66
673. To open the applications view, in the directory view, click **Applications** in the top menu.
68
69 ![Applications][2]
70
714. Click **Add** at the bottom of the page.
72
73 ![Applications][3]
74
755. On the **What do you want to do** dialog, click **Add an application from the gallery**.
76
77 ![Applications][4]
78
796. In the search box, type **Insperity ExpensAble**.
80
81 
82
837. In the results pane, select **Insperity ExpensAble**, and then click **Complete** to add the application.
84
85 
86
87## Configuring and testing Azure AD single sign-on
88The objective of this section is to show you how to configure and test Azure AD single sign-on with Insperity ExpensAble based on a test user called "Britta Simon".
89
90For single sign-on to work, Azure AD needs to know what the counterpart user in Insperity ExpensAble to an user in Azure AD is. In other words, a link relationship between an Azure AD user and the related user in Insperity ExpensAble needs to be established.
91This link relationship is established by assigning the value of the **user name** in Azure AD as the value of the **Username** in Insperity ExpensAble.
92
93To configure and test Azure AD single sign-on with Insperity ExpensAble, you need to complete the following building blocks:
94
951. **[Configuring Azure AD Single Sign-On](#configuring-azure-ad-single-single-sign-on)** - to enable your users to use this feature.
962. **[Creating an Azure AD test user](#creating-an-azure-ad-test-user)** - to test Azure AD single sign-on with Britta Simon.
974. **[Creating a Insperity ExpensAble test user](#creating-a-insperityexpensable-test-user)** - to have a counterpart of Britta Simon in Insperity ExpensAble that is linked to the Azure AD representation of her.
985. **[Assigning the Azure AD test user](#assigning-the-azure-ad-test-user)** - to enable Britta Simon to use Azure AD single sign-on.
995. **[Testing Single Sign-On](#testing-single-sign-on)** - to verify whether the configuration works.
100
101### Configuring Azure AD Single Sign-On
102
103The objective of this section is to enable Azure AD single sign-on in the Azure classic portal and to configure single sign-on in your Insperity ExpensAble application.
104
105
106
107**To configure Azure AD single sign-on with Insperity ExpensAble, perform the following steps:**
108
1091. In the Azure classic portal, on the **Insperity ExpensAble** application integration page, click **Configure single sign-on** to open the **Configure Single Sign-On** dialog.
110
111 ![Configure Single Sign-On][6]
112
1132. On the **How would you like users to sign on to Insperity ExpensAble** page, select **Azure AD Single Sign-On**, and then click **Next**.
114
115 
116
1173. On the **Configure App Settings** dialog page, perform the following steps:.
118
119 
120
121
122 a. In the **Sign On URL** textbox, type the URL used by your users to sign-on to your Insperity ExpensAble application using the following pattern: `https://server.expensable.com/esapp/Authenticate?companyId=<company ID>`
123
124 b. Click **Next**.
125
1264. On the **Configure single sign-on at Insperity ExpensAble** page, perform the following steps:
127
128 
129
130 a. Click **Download certificate**, and then save the file on your computer.
131
132 b. Click **Next**.
133
134
1355. To get SSO configured for your application, contact your Insperity ExpensAble technical support team. Once the case is assigned then email the downloaded certificate file. Also please do provide the Issuer URL and Single Sign On Service URL so that they can be configured for SSO integration.
136
137
1386. In the Azure classic portal, select the single sign-on configuration confirmation, and then click **Next**.
139
140 ![Azure AD Single Sign-On][10]
141
1427. On the **Single sign-on confirmation** page, click **Complete**.
143
144 ![Azure AD Single Sign-On][11]
145
146
147
148### Creating an Azure AD test user
149The objective of this section is to create a test user in the Azure classic portal called Britta Simon.
150
151![Create Azure AD User][20]
152
153**To create a test user in Azure AD, perform the following steps:**
154
1551. In the **Azure classic portal**, on the left navigation pane, click **Active Directory**.
156
157 
158
1592. From the **Directory** list, select the directory for which you want to enable directory integration.
160
1613. To display the list of users, in the menu on the top, click **Users**.
162
163 
164
1654. To open the **Add User** dialog, in the toolbar on the bottom, click **Add User**.
166
167 
168
1695. On the **Tell us about this user** dialog page, perform the following steps:
170
171 
172
173 a. As Type Of User, select New user in your organization.
174
175 b. In the User Name **textbox**, type **BrittaSimon**.
176
177 c. Click **Next**.
178
1796. On the **User Profile** dialog page, perform the following steps:
180
181 
182
183 a. In the **First Name** textbox, type **Britta**.
184
185 b. In the **Last Name** textbox, type, **Simon**.
186
187 c. In the **Display Name** textbox, type **Britta Simon**.
188
189 d. In the **Role** list, select **User**.
190
191 e. Click **Next**.
192
1937. On the **Get temporary password** dialog page, click **create**.
194
195 
196
1978. On the **Get temporary password** dialog page, perform the following steps:
198
199 
200
201 a. Write down the value of the **New Password**.
202
203 b. Click **Complete**.
204
205
206
207### Creating a Insperity ExpensAble test user
208
209The objective of this section is to create a user called Britta Simon in Insperity ExpensAble. Please work with Insperity ExpensAble support team to add the users in the Insperity ExpensAble account.
210
211
212> [AZURE.NOTE] If you need to create an user manually, you need to
213> contact the Insperity ExpensAble support team.
214
215
216### Assigning the Azure AD test user
217
218The objective of this section is to enabling Britta Simon to use Azure single sign-on by granting her access to Insperity ExpensAble.
219
220![Assign User][200]
221
222**To assign Britta Simon to Insperity ExpensAble, perform the following steps:**
223
2241. On the Azure classic portal, to open the applications view, in the directory view, click **Applications** in the top menu.
225
226 ![Assign User][201]
227
2282. In the applications list, select **Insperity ExpensAble**.
229
230 
231
2321. In the menu on the top, click **Users**.
233
234 ![Assign User][203]
235
2361. In the Users list, select **Britta Simon**.
237
2382. In the toolbar on the bottom, click **Assign**.
239
240 ![Assign User][205]
241
242
243
244### Testing Single Sign-On
245
246The objective of this section is to test your Azure AD single sign-on configuration using the Access Panel.
247When you click the Insperity ExpensAble tile in the Access Panel, you should get automatically signed-on to your Insperity ExpensAble application.
248
249
250## Additional Resources
251
252* [List of Tutorials on How to Integrate SaaS Apps with Azure Active Directory](active-directory-saas-tutorial-list.md)
253* [What is application access and single sign-on with Azure Active Directory?](active-directory-appssoaccess-whatis.md)
254
255
256<!--Image references-->
257
258[1]: ./media/active-directory-saas-insperityexpensable-tutorial/tutorial_general_01.png
259[2]: ./media/active-directory-saas-insperityexpensable-tutorial/tutorial_general_02.png
260[3]: ./media/active-directory-saas-insperityexpensable-tutorial/tutorial_general_03.png
261[4]: ./media/active-directory-saas-insperityexpensable-tutorial/tutorial_general_04.png
262
263[6]: ./media/active-directory-saas-insperityexpensable-tutorial/tutorial_general_05.png
264[10]: ./media/active-directory-saas-insperityexpensable-tutorial/tutorial_general_06.png
265[11]: ./media/active-directory-saas-insperityexpensable-tutorial/tutorial_general_07.png
266[20]: ./media/active-directory-saas-insperityexpensable-tutorial/tutorial_general_100.png
267
268[200]: ./media/active-directory-saas-insperityexpensable-tutorial/tutorial_general_200.png
269[201]: ./media/active-directory-saas-insperityexpensable-tutorial/tutorial_general_201.png
270[203]: ./media/active-directory-saas-insperityexpensable-tutorial/tutorial_general_203.png
271[204]: ./media/active-directory-saas-insperityexpensable-tutorial/tutorial_general_204.png
272[205]: ./media/active-directory-saas-insperityexpensable-tutorial/tutorial_general_205.png