Let's say there is in an Azure AD tenant called 'Delta'. 'Member' users on the Delta Azure AD can be authorised and gain access to a DMS if the respective Enterprise Application and DataMiner Agents are configured for SAML-authentication.
There is an external user on a different Azure AD tenant called 'Gamma'. While Gamma is its home organisation they have been given access to the Delta Azure AD as a 'Guest' user.
The question is whether DataMiner can authorise a Guest user the same way as a Member user?
Use Case: This scenario is relevant when Skyline (Gamma org) wants to access our 'on premise' DataMiner Systems (Delta org) for a support task.
Hi Reza,
Yes, that is possible. For DataMiner it doesn't really matter which user account this is, as long as you get authenticated in Azure, DataMiner will accept that user.
I did a quick test on an internal DMS which is using authentication against Azure AD:
Before doing anything, when I tried to log in as an unknown, personal Microsoft account of me, I got this error:
So, indeed, our Enterprise App does not allow that user...
Next step, I added that user to the Enterprise App:
Then I was able to log in, but then DataMiner was still complaining that this user doesn't have any rights yet in DataMiner:
Then, after adding the user in DataMiner, I'm able to log in with that external user:
Let us know if you would run into any problem.
Bert
Super interesting question – I believe DataMiner's ability to authorize a 'Guest' user (B2B collaboration user?) in the same way as a 'Member' user in Azure AD
depends on how the Enterprise Application is configured for SAML authentication.
Far from being an answer, just a comment ^_^
Some key checks may be:
– that Azure AD Guest users (from 'Gamma') can authenticate into the 'Delta' tenant if the Enterprise Application supports external user authentication (B2B collaboration?).
– that the Enterprise Application for DataMiner can be set to allow authentication of both Member and Guest users.
Subscribing to get more info from Azure geeks
HTH