In this tutorial, you'll learn how to integrate Oracle Cloud Infrastructure Console with Azure Active Directory (Azure AD). When you integrate Oracle Cloud Infrastructure Console with Azure AD, you can:

• Control in Azure AD who has access to Oracle Cloud Infrastructure Console.

• Enable your users to be automatically signed-in to Oracle Cloud Infrastructure Console with their Azure AD accounts.

• Manage your accounts in one central location - the Azure portal.

Federating with Microsoft Azure Active Directory

This topic describes how to federate with Microsoft Azure Active Directory (AD).

Note

Before following the steps in this topic, see Federating with Identity Providers to ensure that you understand general federation concepts.

About Federating with Azure AD

To federate with Azure AD, you set up Oracle Cloud Infrastructure as a basic SAML single sign-on application in Azure AD. To set up this application, you perform some steps in the Oracle Cloud Infrastructure Console and some steps in Azure AD.

Following is the general process an administrator goes through to set up the federation. Details for each step are given in the next section.

1. In Oracle Cloud Infrastructure, download the federation metadata document.

2. In Azure AD, set up Oracle Cloud Infrastructure Console as an enterprise application.

3. In Azure AD, configure the Oracle Cloud Infrastructure enterprise application for single sign-on.

4. In Azure AD, set up the user attributes and claims.

5. In Azure AD, download the Azure AD SAML metadata document.

6. In Azure AD, assign user groups to the application.

7. In Oracle Cloud Infrastructure, set up Azure AD as an identity provider.

8. In Oracle Cloud Infrastructure, map your Azure AD groups to Oracle Cloud Infrastructure groups.

9. In Oracle Cloud Infrastructure, set up the IAM policies to govern access for your Azure AD groups.

10. Share the Oracle Cloud Infrastructure sign-in URL with your users.