Moving authentication from ADFS to Azure

[Ruben]

Hello,

We're currently using ADFS login for our instance, but we're thinking about moving over to Azure login.

I have read on the docs about it, but I still have a few questions around this:

• We want to have user imports of specific users. Today we solve this by having the import utility only pick up users with a specific group. How can this be solved using Azure?
• I read that there is a program that has to be run to import the users from Azure. Is this still the case? If so, where would be the recommended place to put it?
• With our LDAP import, we do not have to use a service user. From what I'm reading on the docs, you need one for Azure imports. Would we have to pay full price for such a user?
• How would be the best way to test this authentication without affecting other users?
• What kind of experience have other users had with Azure authentication and switching from another kind of authentication?

[Steve Giller]

The documentation for this is available on the Hornbill Docs site, if you have further questions after reviewing that please post back here.

2 hours ago, Ruben said:

With our LDAP import, we do not have to use a service user. From what I'm reading on the docs, you need one for Azure imports.

This is, as stated in the docs for both tools, strongly recommended for security and reliability reasons. It is not mandatory, and would consume a Full User license. However, you can use the same Hornbill Service Account for all external tools - e.g. User Import, Asset Import, Contact Import, Data Export etc.

[Steve Giller]

@Ruben I'm aware you've asked elsewhere, just to clarify, all the Hornbill information on importing Users is in the documentation previously linked. This includes how to import specific groups and how/where to install/setup the import tool.

For Authentication (SSO) the documentation is here.

Testing would depend on your environment, but most of our tools have a documented dryrun option so you can test without making any changes.