Logging in to Office365 Using MWARE IAM¶
This topic provides instructions on how to configure and integrate Office365 with MWARE IAM for authentication and provisioning.
Microsoft Office 365 requires users in on-premise user stores to be synced to Microsoft Azure Active Directory (Azure AD) in the cloud. MWARE IAM Office365 integration allows the users to be provisioned to the Azure AD without using any external tools or additional effort. MWARE IAM is integrated with Office365 using federated identity, which means the password or password hash is not synchronized to the Azure AD because the user authentication is provided by the on-premise MWARE IAM.
Group-based license management¶
In Azure AD, administrators can define licenses to security groups. Licenses are assigned or removed at the time a user joins or leaves the user group. Using MWARE IAM for user synchronization allows the users to have a special attribute that qualifies them to join a specific user group in Azure AD at the time of provisioning via the IS. Thus, the users are dynamically added to groups and assigned with licenses without any administration overheads.
Info
For instructions to try out this fow, see Configuring Microsoft Azure AD Outbound Provisioning Connector .
Role-based provisioning¶
Role based provisioning to Microsoft Office365 can be done by configuring the Office365 Outbound Provisioning Connector in MWARE IAM. The MWARE IAM Office 365 Outbound Provisioning Connector supports two ways of provisioning users based on role:
-
Manually assign users to a role named "Office365" in MWARE IAM
An identity admin assigns a user to the "Office365" role and MWARE IAM provisions the user to Azure AD.Info
For instructions, see Configuring Microsoft Azure AD Outbound Provisioning Connector .
-
On-demand provisioning
When a user first attempts to log in to Microsoft Office365 Online, MWARE IAM assigns the user to the "Office365" role using a pre-configured adaptive authentication script and then provisions the user to Azure AD. The user is authenticated using MWARE IAM and logged in to Microsoft Office365 Online.Info
For instructions, see one of the following (depending on which protocol you wish to use):