Remedy Single Sign On: How to Configure Integration with Azure Active Directory by SAML

Knowledge Article

Article Number

000379512

Old Article Number

Article Type

Solutions to a Product Problem

Title

Remedy Single Sign On: How to Configure Integration with Azure Active Directory by SAML

Summary

RSSO-SAML configurations using Azure AD as an IDP

Product

BMC Helix Single Sign On

Component

Remedy Single Sign On

Applies to

RSSO-Azure AD integration to use SAML

Problem

How to configure or what is the mapping for the following parameters while configuring RSSO-SAML with Azure AD

The below error was noticed too when troubleshooting this issue, which was resolved by changing the 'Reply URL' as mentioned in the solution section

Error AADSTS50011 - The reply URL specified in the request does not match the reply URLs configured for the application

Cause

Solution

This knowledge article may contain information that does not apply to version 21.05 or later which runs in a container environment. Please refer to Article Number 000385088 for more information about troubleshooting BMC products in containers.

Go through following docs: Configuring SAML 2.0 authentication
Configure RSSO metadata following: Creating and updating the SP signing certificate for SAML authentication
Then view MetaData
Once done then Azure AD/ ADFS Team should share their federated xml/url to import in RSSO.
Provide it to Azure AD/ ADFS Team along with certificate >>they will upload it
Azure AD parameters (in case above steps do not work then you can validate following in Azure AD)

Identifier (Entity ID) >> SP Entity ID from RSSO
Reply URL (Assertion Consumer Service URL) >> http(s)://RSSOServerFQDN:Port/rsso/receiver
Sign on URL >> RSSO Server url: https(s)://RSSOServerFQDN:Port/rsso

Unique User Identifier (user.userprincipalname) >> User ID Attribute

Attachment(s):