Azure Active Directory policies for home realm discovery
You can use Azure Active Directory home realm discovery policies to accelerate logging users into federated domains. To provide an Azure Active Directory home realm discovery policy for an Azure Active Directory application, you assign the policy to the Azure Active Directory service principal. For more information, see the Azure Active Directory documentation from Microsoft.
Azure Active Directory home realm discovery policies are loaded into One Identity Manager during synchronization and cannot be changed.
To display information about an Azure Active Directory policy
-
In the Manager, select the Azure Active Directory > Tenants > <your tenant> > Policies > Home realm discovery policies category.
-
In the result list, select the Azure Active Directory policy.
-
Select one of the following tasks:
-
Home realm discovery policy overview: This shows you an overview of the Azure Active Directory policy and its dependencies.
-
Change main data: Shows the Azure Active Directory policy's main data. You cannot edit the main data.
-
Display name: The Azure Active Directory policy's display name.
-
Description: Description of the Azure Active Directory policy.
-
Definition: Definition of the Azure Active Directory in JSON format.
-
Tenant: Azure Active Directory tenant that owns the policy.
-
Default policy: Specifies whether this is the Azure Active Directory tenant's default policy.
Related topics
Azure Active Directory policies for issuing tokens
You can use Azure Active Directory token issuance policies to specify SAML token properties for logging in. To provide an Azure Active Directory token issuance policy for an Azure Active Directory application, you assign the policy to the Azure Active Directory application. For more information, see the Azure Active Directory documentation from Microsoft.
Azure Active Directory token issuance policies are loaded into One Identity Manager during synchronization and cannot be changed.
To display information about an Azure Active Directory policy
-
In the Manager, select the Azure Active Directory > Tenants > <your tenant> > Policies > Token issuance policies category.
-
In the result list, select the Azure Active Directory policy.
-
Select one of the following tasks:
-
Token issuance policy overview: This shows you an overview of the Azure Active Directory policy and its dependencies.
-
Change main data: Shows the Azure Active Directory policy's main data. You cannot edit the main data.
-
Display name: The Azure Active Directory policy's display name.
-
Description: Description of the Azure Active Directory policy.
-
Definition: Definition of the Azure Active Directory in JSON format.
-
Tenant: Azure Active Directory tenant that owns the policy.
-
Default policy: Specifies whether this is the Azure Active Directory tenant's default policy.
Related topics
Azure Active Directory policies for token lifetime
You can use Azure Active Directory token lifetime policies to specify the validity of token for logging in. To provide an Azure Active Directory token lifetime policy for an Azure Active Directory application, you assign the policy to the Azure Active Directory application. For more information, see the Azure Active Directory documentation from Microsoft.
Azure Active Directory token lifetime policies are loaded into One Identity Manager during synchronization and cannot be changed.
To display information about an Azure Active Directory policy
-
In the Manager, select the Azure Active Directory > Tenants > <your tenant> > Policies > Token lifetime policies category.
-
In the result list, select the Azure Active Directory policy.
-
Select one of the following tasks:
-
Token lifetime policy overview: This shows you an overview of the Azure Active Directory policy and its dependencies.
-
Change main data: Shows the Azure Active Directory policy's main data. You cannot edit the main data.
-
Display name: The Azure Active Directory policy's display name.
-
Description: Description of the Azure Active Directory policy.
-
Definition: Definition of the Azure Active Directory in JSON format.
-
Tenant: Azure Active Directory tenant that owns the policy.
-
Default policy: Specifies whether this is the Azure Active Directory tenant's default policy.
Related topics
Azure Active Directory user accounts
You use One Identity Manager to manage user accounts in Azure Active Directory. The user requires a subscription to access the service plans in Azure Active Directory. Azure Active Directory user accounts obtain the required access permissions to the resources through membership in groups.
Related topics