Hi,
We have a compliance requirement to enable MFA on all our applications including SBM.
The preferred identity service provider is Microsoft Entra ID so we just wanted to know if this integration is possible now in SBM.
Thanks,
Joey Arceo
Cybersecurity
DevOps Cloud
IT Operations Cloud
If an answer to your question is correct, click on "Verify Answer" under the "More" button. The answer will now appear with a checkmark. Please be sure to always mark answers that resolve your issue as verified. Your fellow Community members will appreciate it!  Learn more
Hi,
We have a compliance requirement to enable MFA on all our applications including SBM.
The preferred identity service provider is Microsoft Entra ID so we just wanted to know if this integration is possible now in SBM.
Thanks,
Joey Arceo
Hi Joey, Microsoft Entra ID was formerly known as Azure Active Directory (Azure AD). We have customers who use that with SBM. In general, refer to our documentation here for more details: https://docs.microfocus.com/doc/Solutions_Business_Manager/12.2/ttig_conf_external_identity_provider_authentication#Using_a_SAML2_Service_Provider.
You can reach out to Support with questions. We will follow up shortly with you regarding potential Professional Services assistance as well.
Garry
We use PIV smartcards which (I think) qualify as MFA. Transitioning to CAC cards. SBM supports these.
Here is a video of steps to setup SAML2. This video uses Okta, but MS Entra ID would be similar. One thing to consider is that Azure AD uses a maximum authentication age of 90 days so you will need to update that in Configurator.
Hi David,
I was still able to see the video yesterday but it doesn't seem to be there now. Thanks.
Best Regards,
Joey Arceo
Hi Joey,
You can also try the link directly on YouTube. https://www.youtube.com/watch?v=kG9e8EFlgwk
David