Configuring Azure AD SAML2.0

Overview

FilesAnywhere supports SAML 2.0 SSO integration for various identity providers. For SSO integration with FilesAnywhere and SAML 2.0, the AzureAD Administrator needs to configure the FilesAnywhere application as a Trusted application as per the following steps.  

Also you will need to request FilesAnywhere to enable the single sign-on functionality.

AzureAD Setup

1. Login to your AzureAD administration account.
2. In the AzureAD admin console, navigate to Active Directory, click on the active directory name for which you would like to configure the SSO integration with the FilesAnywhere application.
   
    
3. Click on the Applications tab:
   
    
4. In the bottom panel, click on Add:
   
    
   
5. Choose Add an application from the gallery:
   
    
   
6. Choose CUSTOM. Enter “FilesAnywhere” as the application name and click on the OK button (the round button with the check mark):
   
    
7. From the Dashboard panel click on Configure single sign-on:
   
    
   
8. Choose Microsoft Azure AD Single Sign-On, then navigate to the next step:
   
    
9. Use values in the table below to update step#2, then navigate to the next step:
    

   Field Name	Field Value
   Reply URL / Assertion Consumer Service (ACS)	<<WEBURL>>saml20.aspx?c=<<CLIENTID>>
   Identifier / Entity ID	https://www.filesanywhere.com
   ClientID	<<CLIENTID>>

    

10. Download certificate Base 64 (most common) and provide it to the FilesAnywhere team. Click on the Confirm that you have configured Single Sign-On as ……… check box, then navigate to the next step:
    
     
11. Enter your notification email address, then click on the OK button (the round button with the check mark):
    
     
12. Click on Assign accounts to assign users to the added FilesAnywhere application:
    
     
13. Select the user(s) to whom you would like to assign the FilesAnywhere application and click on Assign in the bottom panel:
    
     
14. Click on the Attributes tab:
    
     
15. Remove existing attributes. Use the ClientID attribute value from the table below and configure SAML token attribute as shown in the image below:
    

     

    Field Name	Field Value
    ClientID	<<CLIENTID>>

    
      
    

16. Navigate to the Dashboard and collect the Single Sign-On URL:
    
     
17. Collect details listed below and provide then to FilesAnywhere to enable SSO for your account:
    1. Initiate Single Sign On (SSO) URL (Step#16)
    2. Download Certificate (Step#10)

18. In this step you will need to request FilesAnywhere to turn on Single Sign-on for your account and click here to submit it: 
    1. Information collected in above steps:
       1. Initiate Single Sign On (SSO) URL
       2. Download Certificate

Login page

Once the Integration is enabled by FilesAnywhere, you will see the SSO button on your login page. Using Use Company Credentials button users can enter their Microsoft Azure AD credential to login into FilesAnywhere.

Still Have Questions?

If you need help or have additional questions, please contact us.