Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Setting up SAML

LeBeauUK

Hi,

We are looking to setup SAML authentication and when we carry out the following step:

Step 2: Configure Azure AD to be able to communicate with the SolarWinds Platform

1. Go to portal.azure.com Enterprise Applications, search for SolarWinds Orion, and select it.

Configure Azure AD for single sign-on login to the SolarWinds Platform Web Console

We are unable to find SolarWinds Orion within Enterprise Applications, anyone knows that we should be looking for now??

Find more posts tagged with

Accepted answers

All comments

KMSigma.SWI

Is it technically the SolarWindsOrionOAuth2Setup? It's the only one that reads correct.

I'm going to try it for my own and see what happens. I don't have an external URL, but I could set one up via a network address translation.

Update: (I think I see the problem...)

LeBeauUK

Doing a search on that all I can see is

KMSigma.SWI

I'm going through the "+ Create your own application" at the top. Will report back.

If anything, you should rate the help page poorly and say it's missing the new "step-by-step" necessary for Microsoft Entra ID steps.

KMSigma.SWI

Here's what I've got for mine.

Only thing on the above screen that isn't shown is the Certificate to put into Orion. I downloaded the Base64 certificate, opened it in Notepad++, and then pasted that into the Orion Web Console wizard.

Some of the language seems different from when the help document was originally created.

After the above settings, I ran the auth test and got back...

Guess I still need my individual User SAML setup...

Created that account - full admin all the way because I'm me and tried the test page again...

[embed:6b06e1a7-0ec1-4e43-9421-8caaf95469b6:cc4f12f0-f757-4a85-901f-38252b32e4a0:message=Groups%20claim%20%27OrionGroups%27%20is%20missing.&type=error]

So, I needed to go back to Azure.

Well, sh!t. Looks like they want me to spend more money to add the "OrionGroups" role. And I'm out, becuase I'm not made of . Yeah, $9 / month / user isn't' much, but that's an expense I truly don't need.

m-milligan

Be aware that Azure Entra ID (formerly Azure Active Directory) has an internal limit of 150 user groups for the OrionGroups claim. If a user has more than 150 group memberships, the SAML response will not include the OrionGroups attribute. Instead, it will include the groups.link attribute, which Solarwinds can't use.

If you find that certain users just can't log in no matter what you do, check the number of groups they belong to. If it's over 150, you have a couple of options. First, you can limit the OrionGroups claim to only the groups explicitly associated with the Azure Enterprise Application:

Alternatively, you can filter the groups by some other attribute:

Either way, you want to get the number of groups under 150, or the OrionGroups attribute won't be in the SAML response.

Kita

@m-milligan Thank you for the feedback. the 150 limit is stated the following document, but we will add the details about the "filter groups"