
While still having the application ( Horizon-SAML) open, click on Overview.Ĭlick on (2. Select the Azure AD group or users you want to allow access for this application (the group Horizon-SAML-Users in this example), and click Select. Assign users and Groups) Assign users and groups. Give the application a name (from now on Horizon-SAML in this example) and click on Create.Ĭlick on (1. Go to the Azure AD portal and click on Azure Active Directory. The latter is used when using True SSO for single sign-on in Horizon. Install Azure AD Connect Creating the Enterprise Application (Metadata)įirst we need to create the metadata required for the integration between the Unified Access Gateway and Azure AD, and between Horizon and Azure AD. If you want to setup Azure AD Connect, you can follow the steps from the link below. If you already have Azure AD Connect in place or don’t want to setup Azure AD Connect, you can skip this chapter. A running Unified Access Gateway, version 3.8 or higherĮven though it is not strictly necessary to have Azure AD Connect in place for this solution, it may be easier to sync your on-prem AD identities with Azure AD from, for instance, an administrative perspective.

A running Horizon environment, version 7.11 or higher.

Prerequisitesīefore continuing, I assume you already have the following in place.
