Setup Cloud Director SAML Using Microsoft Entra (Azure AD)

This article explains how to configure a Cloud Director tenant to use Microsoft Entra for authentication using SAML.

1. Sign In to your Cloud Director Tenant using your existing account.
   
   
2. Click on Administration.
   
   
3. Expand Identity Providers > click on SAML.
   
   
4. Ensure the Certificate isn't expired (If it is expired, click Regenerate Certificate) > Click Configure.
   
   
5. Click Retrieve Metadata. A XML file should download.
   
   
6. Log into Microsoft Entra at https://entra.microsoft.com.
   
   
7. Expand Identity > expand Applications > click on Enterprise applications.
   
   
8. In the top menu, click on New Application.
   
   
9. Click on Create your own application.
   
   
10. Enter a name for the application and select Integrate any other applicationyou don't find in the gallery (Non-gallery).
    
    
11. Click on Create.
    
12. Click on Set up single sign on.
    
    
13. Click on SAML.
    
    
14. Click on Upload metadata file.
    
    
15. Select the XML file downloaded from Step 5 > Click Add.
    
    
16. Click on Save.
    
    
17. In the SAML Certificates section, click on Download next to Federation Metadata XML. It will download a XML file.
    
18. Under Manage, click on Users and groups > click on Add user/group.
    
19. Select the users/groups that should be able to authenticate with Cloud Director > click Assign.
    
20. Go back to Cloud Director, click on Configure again.
    
21. Go to the Identity Provider tab > slide the Use SAML Identity Provider to on. 
    
22. Click on SELECT METADATA XML File.
    
    
23. Upload the XML file downloaded from Step 17. Click on Save.
    
24. Expand Access Control > click on Users > click on Import Users.
    
    
25. In the Import Users window, enter the email addresses of the users who will have access (These must be allowed in the Enterprise Application in step 19) > from the Assign Role, select a role to assign to the users > click Save.