Converting domain to federated

Once you have met the above requirements, you can proceed to convert your domain to federated from inside the Windows Azure AD PowerShell. You will need to refer to the information found on the Single Sign-On Setup page.

Steps

  1. Navigate to Policies > Policies.
  2. Select Microsoft 365 and then click the Microsoft 365 instance.




  3. On the Office 365 Instance dialog, select the SAML SSO option button as the Cutoff Method.


    By default, the Cutoff Method is set to None.
    Note: The Microsoft 365 tile will be hidden from the User Portal when the Cutoff Method is set to None in the Office 365 Instance dialog.
  4. Click OK to save the Office 365 instance.
    The application setup page displays the Setup Web SSO link when SAML SSO is selected as the Cutoff Method.
  5. Click Save to save the Microsoft 365 setup page.
  6. Click the Setup Web SSO link to view the details of the Single Sign-On Setup page.


  7. Navigate back to the Single Sign On page and do the step as follows:


    1. If your domain is not already federated, copy the Non-Federated Domain Command and paste it into PowerShell.
    2. If your domain is already federated, copy the Federated Domain Command and paste it into PowerShell.
      Note: In some scenarios, users should be logged out of both Forcepoint Data Security Cloud | SSE and an external IdP when clicking the logout link in the application. To accomplish this, use https://portal.bitglass.com/accounts/logout/ as the Logout URL instead of the default of https://portal.bitglass.com/portal/
  8. Once you have successfully federated and configured Forcepoint Data Security Cloud | SSE as the SAML IdP:
    1. Navigate back to the Policies > App Policies page and scroll down to the Microsoft 365 application.
    2. Set up a policy line for Direct App Access and have an admin or a user log in directly once to validate the SAML SSO setup.
    3. Set up an additional policy to direct users through Secure App Access (reverse proxy).
    4. Adjust your policies to start sending users through the Forcepoint Data Security Cloud | SSE proxy and test to ensure it is working.