SAML with Azure AD

[vertices]

Hello all. I'm having trouble setting up SAML logins with Azure as the IdP. I've setup SAML on many other products but having trouble here for some reason.

VBA has a public IP and is accessible over https. The URL in the assertion in the Veeam config is the public IP. I've downloaded and uploaded the metadata both ways from VBA and Azure AD on the app registration. The app is assigned to users in Azure AD, and they have matching UPN logins in Veeam under Portal Users where the Veeam user name is the Azure AD UPN of the user.

The problem is anytime I try to login to VBA with SSO as an Azure AD user, the user successfully performs authn to Azure AD, and then kicks back to Veeam and Veeam says "Identity provider did not provide a username." I can only assume that something is incorrect but following this guide hasn't helped me so far: https://helpcenter.veeam.com/docs/vbazu ... aml&ver=40

Any ideas? Thanks!

[nielsengelen]

Hi,

This looks like a technical issue. Could you open a support case and let us know the ID for future reference and follow up?

These type of issues are almost impossible to solve using the forums.

[vertices]

Support helped me resolve it. I had to add an additional claim as in this screenshot provided by support. After adding the claim, everything worked perfectly with everything else as default, just uploading the metadata to both Veeam and AAD. Thanks.

[nielsengelen]

Thanks for the follow-up. Good to know for future reference.

[cketcham]

Wow thanks so much, I've been banging my head on this most of the day. The instructions do mention something about possibly having to do this but it doesn't give any sort of good detail, I don't know why that's not simply added to the instructions, it would have saved us so much time!

[nielsengelen]

Hi Casey, we will adjust and update the help center for this section.