Which is the difference Between Azure AD and SAML 2.0, and Integration with UiPath Automation Cloud?
Issue description:
Difference Between Azure AD and SAML 2.0, and Integration with UiPath Automation Cloud
Resolution:
Azure Active Directory (Azure AD) and SAML 2.0 are both identity management protocols used for authentication and authorization. However, they serve different purposes and are used in different contexts.
Azure AD:-
Azure Active Directory (Azure AD) is a cloud-based identity and access management service provided by Microsoft. It offers a centralized directory that organizations can use to manage and authenticate users, devices, and applications across various platforms and services.
SAML 2.0:-
SAML 2.0 (Security Assertion Markup Language 2.0) is an XML-based open standard that allows for the exchange of authentication and authorization data between an identity provider (IdP) and a service provider (SP). It is commonly used for Single Sign-On (SSO) scenarios, where a user logs into a central identity provider (like Azure AD, Google, Okta) and can access multiple services without needing to re-authenticate.
Azure AD integration with UiPath Automation Cloud:-
- For integrating Azure AD with UiPath Automation Cloud, follow the steps mentioned https://docs.uipath.com/automation-cloud/automation-cloud/latest/admin-guide/azure-ad-integration
- Once the integration is successful, you should be able to search the Azure AD users/groups in Tenant --> Orchestrator --> Manage Access and provide the required access.
- Because the integration with Azure AD is performed at the level of the Azure tenant, by default all Azure AD users can access Automation Cloud. First time an Azure AD user signs-in to the UiPath organization, they are automatically included in the UiPath group Everyone. This grants them the User role in the organization which provides the basic level of access within the UiPath ecosystem.
SAML 2.0 integration with UiPath Automation Cloud: -
- For configuring SAML 2.0 with UiPath Automation Cloud, refer to the steps mentioned https://docs.uipath.com/automation-cloud/automation-cloud/latest/admin-guide/configuring-the-saml-integration
- Searching of users and groups from the identity provider is not possible. Only the users added to the application in the Identity Provider platform are available to access UiPath Automation Cloud.
- The scenario here is a bit different, after the setup, in order to give users the required permissions, a provisioning rule needs to be created. These are based on the attributes that are sent in the SAML response that will assign the user on login to a specific local group.
Differences between Azure AD Integration and SAML S.0 Integration
- Azure AD integration is a directory integration that allows the import of the groups/users directly from AAD in the interface. For SAML, the users are created on Sign-In through Just-in-Time provisioning. Also, the groups are not imported directly but the users are assigned to local groups through attribute mappings. For more details, refer https://docs.uipath.com/automation-cloud/automation-cloud/latest/admin-guide/configuring-the-saml-integration#step-25-configure-provisioning-rules-(optional)
Note:-
- AD users / SAML Users are not shown at Automation Cloud -> Admin -> Accounts & Groups -> Users. It just populates the local user accounts.
- The AD users can be browsed at the service level.