Any updates here?
We’ll support it in April.
Hi @Gerald H. Q1 2019 already finished and Q2 is with us… is there a target version for this feature?
Yos
Hey Guys,
We are MLC/NAB are also after Dynatrace SAAS, SSO. Though our usecase is not via AzureAD, but on-prem AD. Is it still tracking mid-late April? Keen to do this.
Yes, it the dates c communicated are still valid. Once the feature is live, I’ll provide an official blog post in our Dynatrace blog.
Hello, SAML federation is now GA. Please check out the SAML setup instructions.
Gerald
We are using Azure. After uploading the file from Azure for the metadata we see this error:Please provide a valid SAML 2.0 document containing an IDPSSODescriptor, POST single logout URL, and emailAddress NameIDFormat.
Kevin, looks like your IdP metadata is missing some entries that we expect. Can you please reach out to support or talk to us via chat?
Thanks, Gerald
We did get the same error as Kevin, did you manage to solve this problem?
I have an open support ticket but no replies yet.
It’s a bit strange, the default federation metadata xml that is exported from our Azure AD tenant is not working. It’s missing settings about “NameIDFormat”. But I don’t think you can change entityid in AzureAD SAML. An app page shows an error message after the user signs in - Microsoft Entra ID | Microsoft Learn
If anyone has mange to setup SSO with Azure as Idp please provide a guide for it.
Hi Kevin and Patrik, looks there is problem with IDP configuration or metadata. Please share somehow metadata. You can do it by opening support ticket and sharing it here.
Thanks, Marcin
Did manage to get this to work with Azure AD.
So the solution to this is:
- Sign SAML response and assertion (Link to How-To)
- Add this line to under IDPSSODescriptor metadata XML that you export from Azure: <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</NameIDFormat>