Views:

Configure Microsoft Entra ID as a SAML (2.0) identity provider for Trend Vision One to use.

Microsoft Entra ID is a multi-tenant cloud based directory and identity management service.
To use Microsoft Entra ID, you must have a valid subscription with a Microsoft Entra ID edition license (Free, Basic, or Premium) that handles the sign-in process and eventually provides the authentication credentials to the Trend Vision One management console.

Procedure

  1. Sign in to the Azure management portal at https://portal.azure.com using your Microsoft Entra ID administrator account.
  2. On the Microsoft Azure main page, click Microsoft Entra ID. On first use, click More services and find Microsoft Entra ID.
  3. In the left navigation, click Enterprise applications.
    The Enterprise applications | All Applications screen appears.
  4. Click New application.
    The Browse Microsoft Entra Gallery screen appears.
  5. Click Create your own application.
  6. Type a display name for the application.
    For example, type XDR.
  7. Select Integrate any other application you don't find in the gallery.
  8. Click Create.
  9. (Optional) Assign users and roles:
    Important
    Important
    If you intent to use the private access service and internet access service in the Zero Trust Secure Access app, Trend Micro recommends that you skip step 9. Instead, go to Properties in the left navigation, disable the User assignment required? toggle, and then proceed to step 10.
    If you require user assignment, assign each user individually to use the private access service and internet access service.
    1. Under the Getting Started section, click Assign users and groups.
      The Users and groups screen appears.
    2. Click Add user.
      The Add Assignment screen appears.
    3. Click Users.
      A new frame for Users appears on the right side of the screen.
    4. Click the users you want to assign, and then click Select.
      The number of selected users appear under Users and the Assign button is enabled.
    5. Click Assign.
      The Users and groups screen appears.
    6. In the left navigation, click Overview.
      The Overview screen appears.
  10. Under the Getting Started section, click Set up single sign on.
    The Single sign-on screen appears.
  11. Click SAML.
    The SAML-based Sign-on screen appears.
  12. Click Upload metadata file.
    The Upload metadata file window appears.
  13. Click Select a file.
    A browse file window appears.
  14. Browse and open the metadata.xml file that you downloaded in a previous step.
    The browse file window closes.
  15. In the User Attributes & Claims section, ensure that the Unique User Identifier is configured to the following: user.userprincipalname
  16. Click Save.
    The settings are saved.
  17. After the settings have been saved, click the close icon in the Basic SAML Configuration window.
    The Basic SAML Configuration closes and the SAML-based Sign-on window appears.
  18. If prompted to test single sign on now, click No, I'll test later.
  19. Under the SAML Signing Certificate section, click Download for Federation Metadata XML, and then save the file.
    Note
    Note
    Import this metadata file to Trend Vision One.