Here’s what you will need to do in order to integrate your JFrog platform with Azure Active Directory using SAML SSO.

On Azure:

1. In the Azure portal, on the JFrog Artifactory application integration page, find the Manage section and select Single sign-on and then select SAML.

2. On the "Set up Single Sign-On with SAML" page, click the Edit icon for Basic SAML Configuration to edit the settings:

In theIdentifiertext box, enter your JFrog Platform URL:

For JFrog Cloud users that would be:

In theReply URLtext box, enter the SAML URL for your JFrog Platform service:

For JFrog Cloud users that would be:

On JFrog Platform:

• Enter theSAML LoginandLogout URLs that were provided to you in the Setup JFrog Artifactory section.
• SAML Service Provider Name, enter what you have as the Identifier on the Azure side (which should be the base URL of your JFrog Platform service):

• Enter the Base64 certificate previously downloaded from the SAML Signing Certificate section.
• Enter the user attributes for group and email (accessible from Azure side, step 3):
  • The Group Attribute in the SAML login XML response.
  • The Email Attribute is for when “Auto Create Artifactory Users” is enabled or an internal user exists, Artifactory will set the user's email to the value in this attribute that is returned by the SAML login XML response, as can be seen in the following image:

• Select other options as shown and click Save.

Notes Regarding the configuration:

• Kindly note that the “SAML Logout URL” is responsible for what will happen once you log out as a SAML user. Therefore, in the above example, the user will be logged out of other Azure applications as well. Should you want to only log out of your JFrog Platform, replace the logout URL with: $JFROG-URL/ui/login/ (hence the difference in the two screenshots).
• 自动创建Artifactory用户——当组,authenticated users are automatically created in Artifactory. When not set, for every request from an SSO user, the user is temporarily associated with default groups (if such groups are defined), and the permissions for these groups apply. Without automatic user creation, you must manually create the user inside Artifactory to manage user permissions not attached to their default groups.
• Allow Created Users Access To Profile Page – Auto created users will have access to their profile page and will be able to perform actions such as generating an API key

Should you want more information, you can review Microsoft'stutorial, or the followingblog poston our website: