To activate MFA in Cloud Director, you can use SAML. In order to do this, you need to complete the following steps.
Configuration Azure AD
Create an Active Directory group and synchronise it with Azure Active Directory.
Setting up Azure AD - adding an enterprise application
Add an enterprise application. You can do this by navigating to ‘Azure Active Directory’ and selecting ‘Enterprise Applications’.
Click on ‘New Application’ and select ‘Non-gallery Application’.
Click ‘Add’ and give the application a name.
Configuring Single Sign On
To configure Single Sign on, click on ‘SAML’. Next, fill in the requested information.
Cloud Director
Now that the single sign-on configuration has been set up within Azure, the configuration needs to be done in Cloud Director. In the link below, change ‘Customer-ICT’ to your Organisation name. Then download the Metadata (do this for the correct location).
https://en1.vcloud.fundaments.nl/cloud/org/Customer-ICT/saml/metadata/alias/vcd
https://pdc2.vcloud.fundaments.nl/cloud/org/Customer-ICT/saml/metadata/alias/vcd
https://ix7.vcloud.fundaments.nl/cloud/org/Customer-ICT/saml/metadata/alias/vcd
https://am2.vcloud.fundaments.nl/cloud/org/Customer-ICT/saml/metadata/alias/vcd
Save the file spring_saml_metadata.xml. Within the VDC, go to the Administration tab:
And below Identity Providers, choose the SAML option.
Under ‘Service Provider’, enter the ‘Entity ID’ (make sure it is the same as the one in Azure under the name Identifier (Entity ID))
Azure configuratie of SAML
Upload the file spring_saml_metadata.xml into Azure which you just downloaded and saved.
Download the Azure AD Federation metadata XML from the Azure location below.
Fill in or import the Federation Metadata XML from the Azure Portal you just downloaded.
Import Users of Groups - Azure AD
Add users from your Active Directory to Azure. You can also add groups here.
In Cloud Director, choose the group or users assigned under Users and Groups. After this, you can add permissions and roles to the group.
Now MFA has been enabled by configuring SAML authentication and connecting it to Azure AD!
