[MUSIC]
Luis Leon Plata: Welcome back. In this video, I’m going to
demo how to use the application activity report to migrate
your applications from AD FS to Azure AD.
Here I am in my AD FS server, where you can see the
applications that I have configured with AD FS. Now, the
goal is to migrate these applications to Azure AD.
As we mentioned before, Azure AD offers the AD FS
application activity report using Azure AD Connect Health.
So, you have to install Azure AD Connect Health in your
AD FS server to be able to get this report.
To get access to the report, let’s go to the Azure AD Portal
here. We’re going to click on enterprise applications.
We’re going to go to the usage and insights preview.
And here, you can see the AD FS application activity report.
Notice that all the apps that I have on the AD FS service
are present here in this experience. We offer the unique
user account and the migration status for every app that
has usage activity within the 30 days.
Let’s review this application that says additional steps
required. So, know because an app is ready to migrate
it means that you can now migrate it to Azure AD. It
only means that the admin will need to do an extra review
to the configuration to see how that matches to the
configuration in Azure AD. So, let’s go inside this
application.
So, we can see that Azure AD runs some test to assess if
the app is easily migratable to Azure AD or not. Let’s explore
one of the tests. Azure AD is telling us that one of the Issuance
Transformation roles has something that needs our attention.
When we go inside, we see that this role, Issuance Issuance,
has a transformation that uses regular expressions to
transform the value of the claim to be admitted. Azure AD
also tells us what’s the alternative or how you can accomplish
that on Azure AD and provide guidance on how to follow the
instructions.
So, if we go back to our main list, we can see that Dropbox
is one of the applications that it’s telling us that it’s ready
to migrate. Since it has passed all these tests that we
perform. So, how can I start migrating these applications?
We generally recommend to start with SaaS applications
like Dropbox because in Azure AD, we have hundreds of
pre-integrated apps for you to follow easiest steps and
configure them with Azure AD. So, Dropbox is an ideal
candidate to start our migration on.
So, I’m going to switch to the Azure AD gallery, where we
have all the SaaS applications that are preintegrated with
Azure AD, so you can see here. I’m going to search for
Dropbox.
Here. I’m going to select the application and then I’m going
to click create. You can read the step by steps to tutorial how
to configure Dropbox.
I have already created the application here, so you can see I
created the application in Azure AD. I have used some metadata
to populate these first steps, so identifier and reply URL are
ready. For user attributes and claims, I have made a small
transformation to be able to match the identifier used in
Dropbox for these applications. So if we go inside the user
and claims, we can see that to have made the nameidentifier,
I’m actually applying a multiple transformation to a claim.
First, I’m instructing the mail prefix and to the output of
that, I join it with these verified domains.
Azure AD provides multiple transformations based on
regex that you can use to transform those claims and we
can keep adding more and more and more as you require.
So, let’s go back to our main screen.
Now that we have configured the Azure AD side of Dropbox,
we need to configure the Dropbox site for completing the
single sign-on configuration. In Azure AD, you can use the
one click SSO feature to configure Dropbox, so you
don’t have to follow 20 steps to configure the application.
So, we’re going to click here, set up Dropbox for business.
We don’t load the certificate. We click here.
Azure AD takes us to Dropbox. And then it starts prompting
us on the steps they need to take, so I’m consenting of
Azure AD configuring Dropbox on my behalf.
Then I see that Azure AD has configured the application on
my behalf.
It’s asking me to upload my certificate.
So, I’m going to upload the certificate.
Now, okay, to save the changes. OK.
And then once it’s completed, it will take me back to Azure
AD. So, we see that we successfully configured Dropbox.
Now, another feature that Azure AD offers is the ability to
test the single sign-on. So, I’m going to click here, test.
I’m going to see if I can sign in.
So, it’s prompting me what credentials one I used.
I’m going to use TPerkins.
And now, I can see that Azure AD has successfully issued
a token to the application. And if I go back to Dropbox and
I click continue here, I can see that I’m logged into the
application.
So, using the test and experience, I can get this information
that was only available using other tools like Fiddler. So now,
we do test and experience, I can download this SAML request
and SAML response in case I need to troubleshoot anything.
In the next video, Jairo is going to show us how you can
migrate or protect those legacy applications with Azure
AD.
[MUSIC]