Setting up Visual Paradigm Teamwork Server with Microsoft Azure

Teamwork Server supports Microsoft Azure for Enterprise clients. In this article we will go into the details of setting up SAML authentication through Microsoft Azure. Although this is specific to Microsoft Azure the concepts could be adapted to any other SAML Identity Provider.

Step 1 - Setting up Microsoft Azure

In this section you will learn how to create a new application integration in Microsoft Azure.

Part of the setup of Microsoft Azure requires providing details given by Teamwork Server. So now, open a web browser and login VP Server as administrator.
Select System Tools from the menu on the left hand side.
Open the Single Sign-On tab and keep it opened. We will come back later.

The Single Sign-On page of Teamwork Server
Open another tab/window in the web browser and visit Microsoft Azure.
Create a new application in Azure. Name it VP Teamwork Server. Click Next.

Creating application VP Teamwork Server
Fill-in the App properties. Copy the value of Single Sign-on (ASC) URL from Teamwork Server to Microsoft Azure as the SIGN-ON URL, and then copy the value of Audience URI (SP Entity ID) from Teamwork Server to Azure as APP ID URL.

Filling in App properties
Click Complete.
Click VIEW ENDPOINTS at the bottom of the screen.

Clicking on View Endpoints
Copy the URL of FEDERATION METADATA DOCUMENT. Visit the URL and save the XML content to a new file.

To open the URL of metadata
Open the CONFIGURE page.

Configure server
Choose Yes for the option USER ASSIGNMENT REQUIRED TO ACCESS APP.

Enable the requirement of user assignment to acces app
Click SAVE at the bottom of the screen to save the changes.

Save changes
Open the USERS AND GROUPS page.

Opening Users and Groups page
Select the person who will use Teamwork Server.

Selecting people to assign
Click ASSIGN at the bottom of the screen. Select YES for confirmation. Note that the assignment does not instantly grant this person accessibility to Teamwork Server. You still have to go through the process of inviting him/her to Teamwork Server, which will be mentioned in the next section.

User assignment
Repeat the assignment process on other people who need to access Teamwork Server.

Step 2 - Setting up Teamwork Server

Go back to Teamwork Server. You should be opening the Single Sign-On tab of the System Tools page. Now, enter Azure as the Identity Provider (IDP) Name.

IDP name entered
In the IDP metadata field, upload the metadata file saved in the previous section.

IDP metadata uploaded
Click Apply.
Click OK when you are prompted for confirmation. If sign-in success, you will be logged out automatically. If failed, please make sure the Teamwork Server application has been assigned to you in Microsoft Azure, and try again.
From now on, Teamwork Server is integrated with Microsoft Azure. You, as the administrator can access Teamwork Server with your Microsoft Azure account and perform administration and management tasks. Team members, once being invited and have accepted the invitations, can login Teamwork Server from Visual Paradigm with their Microsoft Azure account.

Login with Microsoft Azure

Step 3 - Member management

Since the integration with Microsoft Azure, in order for someone to become a Teamwork Server member, he/she has to:

Be a person who have been assigned the Teamwork Server application in Microsoft Azure and,
Have accepted the invitation sent from Teamwork Server administrator.

The first point has been covered in step 1 above. In this section we are going to show you how to invite a member.

Open a web browser and login VP Server as administrator.
Select Members from the menu on the left hand side.
Under the Members tab, click Invite Member.

Invite member
Enter the name and email of the members. Make sure you have already assigned the VP Teamwork Server application to them in Microsoft Azure. If not, they won't be able to access any projects. Click Send Invitation.

Send invitation
The invitee will receive an invitation shortly. Click on the activation link in the email.

To activate Teamwork Server account
He/she will be redirected to a web page where he/she can fill in his name. Enter the name and click Activate with Azure.

Activating Teamwork Server account

If success, he will see the Congratulations screen. From now on, he/she can access Teamwork Server from Visual Paradigm with his/her Microsoft Azure account.

Activation success