There's a new home for Articles. Find Articles on Our Product Support Page.
How do I change the entity ID URL in the metadata file in IDP, because what appears is the hostname from the MobiControl server, not the MobiControl login URL?
Since there is no documentation on how to do this, I thought I’d share it with everyone. You should add Azure Directory first. See this guide: https://discussions.soti.net/thread/how-to-connect-mobicontrol-with-azure-ad In MobiControl – Global Settings – Services – Identity Provider Download the MobiControl Metadata File Go to Azure AD Portal Enterprise Applications New Application Search for and add MobiControl Set up single sign on – SAML Upload metadata file – upload the MobiControl Metadata File you downloaded from MobiControl Basic SAML Configuration should be like this: Identifier (Entity ID) - https://%DOMAIN%/mobicontrol Reply URL - https://%DOMAIN%/mobicontrol/sso/sp/handlelogon Sign On URL – https://%DOMAIN%/mobicontrol Logout Url - https://%DOMAIN%/MobiControl/sso/sp/handlelogout Example: Identifier (Entity ID) - https://s123456.mobicontrolcloud.com/mobicontrol Reply URL - https://s123456.mobicontrolcloud.com/mobicontrol/sso/sp/handlelogon Sign On URL - https://s123456.mobicontrolcloud.com/mobicontrol Logout Url - https://s123456.mobicontrolcloud.com/MobiControl/sso/sp/handlelogout SAML Signing Certificate Signing Options – Sign SAML response and assertion Signing Algorithm – SHA-256 Go to Azure AD Portal App Registrations Find MobiControl – if you do not see it, check under All Applications Manifest Search for “Group Membership Claims” – the value should be “1” with the “ Go to Azure AD Portal Enterprise Applications MobiControl Set up Single Sign On SAML Signing Certificate Download Federation Metadata XML Go to MobiControl Global settings – Services – Identity Provider Select + Name – can be anything Idp Metadata File – upload the Metadata XML you just downloaded Group Settings – Group From – Directory – add you directory Save Testing: Create a new iOS Enrolment User Enrolment Accounts Federated by Microsoft Azure AD – select the directory you just created Based on group membership Select the Azure Idp and search for a group. If you find it, your good to go.
I am unable to remove IDP User groups that have been added to my cloud tenant. The delete button is not available like it is with local user accounts that have been created. What am I missing?
Has anyone managed to get OneLogin established as an IdP? I'm just trying to get it so I can manually assign users to devices at this point, not use it for console login, but I can't seem to find any logging or error messages. Using cloud instance of MobiControl and feel like my hand is tied behind my back since the user interface doesn't provide any notice of success or failure.
Top-tier experts who are delivering outstanding content. Should have more than 7000 points.
Experts who are consistent with great content. Should have more than 1000 points.
Highly experienced members with valuable inputs. Should have more than 700 points.
Beginners taking the initiative. Should have more than 500 points.
New contributors starting their journey. Should have more than 250 points.