Configure Microsoft Azure AD SSO settings

On the Knox Admin Portal

1. In the top-right corner, click your account icon > My account.
2. On the Manage your Account page, click the SSO SETTINGS tab.

On the Microsoft Azure portal

Next, add the Samsung Knox and Business Services app:

1. Under Azure services, click Azure Active Directory.

   

2. In the left sidebar, click Enterprise Applications.

   

3. Select New application.

   

4. In the Browse Azure AD Gallery section, enter Samsung Knox and Business Services in the search box.

5. Select the Samsung Knox and Business Services app from the results and add it.

   

Then, assign users and groups to the Samsung Knox and Business Services app:

1. In the left sidebar, click Users and groups.

   

2. Click Add user/group.

   

3. On the Add Assignment screen, under Users and groups, click None Selected.

   

4. In the list of users and groups, search for and select the users and groups to assign to the app. Then, click Select.

   Selected users must have an Azure Active Directory account.

5. At the bottom of the screen, click Assign to allow the users to access the app.

On the Knox Admin Portal

Finally, follow the steps below to set up the Basic SAML configuration:

1. In the Azure portal, select the Samsung Knox and Business Services application page, navigate to the Manage section and select Single sign-on.

   

2. Select SAML as the single sign-on method.

   

3. Under Basic SAML Configuration, enter the SAML info from your Samsung Knox settings:

   • For the Identifier (entity ID) field, enter https://www.samsungknox.com.
   • For the Reply URL (assertion consumer service URL) field, enter https://central.samsungknox.com/ams/ad/saml/acs.
   • For the Sign on URL field, enter https://account.samsung.com/.

   

4. Under SAML Signing Certificate, copy the App federation metadata URL.

   

5. Navigate back to your Samsung Knox account settings. Under App federation metadata URL, paste the value you copied in Step 4.

6. Click CONNECT TO SSO.

7. In the sign-in window that opens, enter your AD credentials.