Menu
Samsung Knox logo with shield, lock, wrench, briefcase, key, cog, and wireless symbols

Sign in with Azure AD

Simplify user access management by setting up Microsoft's Azure Active Directory (Azure AD) for use with Samsung Knox services.

As a super admin, you can reduce the administrative burden on your IT department by managing all users through your Azure portal. Users can authenticate with just one set of credentials to quickly access Knox services.

Note that once Azure AD is set up for your Samsung Knox tenant, any sub-admins that you invite can only use AD credentials to log in. The Samsung Account and Azure AD sign-in methods cannot be used together.

Audience

This document is intended for IT admins. Learn how to seamlessly integrate Azure AD with the Knox portal and its services in just a few steps, and leverage the single sign-on system for access to Knox solution consoles.

Supported services

Currently, only Knox Configure, Knox Mobile Enrollment, Knox E-FOTA, Knox Manage, and/or Samsung Care+ for Business customers can set up Azure AD SSO to log in to Knox services.

NOTE — If your Knox account is subscribed to a Knox service other than those listed above, the Azure AD SSO settings are disabled for your account.

Supported account types

To set up Azure AD SSO, all users logging into Samsung Knox must be associated with:

  • A licensed Office 365 mailbox
  • A shared Office 365 mailbox

If you're logging in with a shared mailbox, make sure login credentials are enabled for the mailbox.

Any accounts associated with distribution groups must first be converted to a licensed user or shared mailbox. Distribution accounts cannot be used to access the Samsung Knox portal once Azure AD is set up for your organization.

NOTE—A user's Samsung account email address must also match the email address they signed up for the Samsung Knox portal with, otherwise they are blocked from accessing Knox services. To change a Samsung account to match the Knox account, see:

Before you begin

Make sure your Knox portal account is registered as your organization's primary administrator, also known as a super admin. To learn more about super admins, see:


Start the tutorial >>
Share it: