Configuring SAML SSO with Azure AD

Installing the Meraki Dashboard Application in Azure

1. On the Azure Portal home page, click or search for Microsoft Entra ID.
2. On the left-hand side within Azure Active Directory, click Manage > Enterprise applications.

3. Click New application.

 

4. Search for “Meraki Dashboard”.

5. Select the application title named Meraki Dashboard with Cisco Systems, Inc. as the publisher and click Create.

6. Navigate back to Enterprise applications from step 2. Once the app has finished installing, you will see Meraki Dashboard in your application list.

 

Creating App Roles within Meraki Dashboard Application in Azure

There are two methods to declare app roles using the Azure Portal:

• App roles
  • Uses UI to make changes
• App manifest editor
  • Requires editing JSON by hand

Microsoft Azure explains both methods to declare app roles in their platform.

Examples of the app role and app manifest editor are shown below to showcase the differences in management.

• App roles example:

1.  Click on, "App registrations," under the, "Manage," option.

2.  Within the search box, type the name of the Meraki application that you have created.  If it does not appear, make sure that you have, "All applications," highlighted.

3.  Select the Meraki App.

• App manifest editor example:

 

Adding User Roles to the Meraki Dashboard Application in Azure

1. On the Azure Portal home page, click Azure Active Directory.
2. On the left-hand side, click Manage > Enterprise applications.

 

3. Find and select Meraki Dashboard app from the application list.

4. On the left-hand side, click Manage > Users and groups.

 

5. Click Add user/group

 

6. Select the users who can access your Meraki dashboard organization and assign a role.

 

7. Click Assign when done assigning permissions.

The list of users will be shown in the user list of the Meraki dashboard application in Azure.

Enabling SAML SSO in Azure Active Directory

1. On the Azure Portal home page, click Azure Active Directory.
2. Click Manage > Enterprise applications.

 

3. Find and click Meraki Dashboard app from the application list.

4. Select Single sign-on on the left under Manage and select SAML.

 

5. Within the Basic SAML Configuration section, click Edit and type https://n27.meraki.com/saml/login/ into the Reply URL text field.

6. Click Save.

7. Copy the Thumbprint from the SAML Signing Certificate section and save it, this will be used for linking Azure with your Meraki Dashboard Organization. This Thumbprint will be entered into the Dashboard for configuration. 

 

 

Enabling SAML SSO in Meraki Dashboard

1. Log in to your Meraki Dashboard and navigate to Organization > Configure > Settings.

2. In the Authentication section, toggle SAML SSO to SAML SSO enabled and click Add a SAML IdP.

3. In the X.509 cert SHA1 fingerprint field, enter the certificate Thumbprint generated in the Enabling SAML SSO in Azure Active Directory section.

4. The unique Consumer URL or Reply URL in Azure will populate, as shown below, once the changes are saved. Copy the Consumer URL and save it for later.

5. In Azure Portal, navigate to the Single sign-on SAML section.

6. Within the Basic SAML Configuration section, click Edit.

7. Overwrite the existing default Reply URL (Assertion Consumer Service URL) with the Consumer URL from step 4.

 

Creating SAML Administrator Roles in Meraki Dashboard

1. Log in to your Meraki Dashboard and navigate to Organization > Configure > Administrators and click Add SAML role.

2. Create a role and select the access you would like this role to grant the user.

3. Click Create role.

4. Repeat steps 1-3 for each additional SAML role created in Azure.

Testing the SSO Configuration

To test the SSO functionality, follow the steps as detailed under the "Test SSO" section of the documentation on Microsoft's website.