java active directory 单点登录_教程：Azure Active Directory 单一登录 (SSO) 与 Contentful 集成...

您现在访问的是微软AZURE全球版技术文档网站，若需要访问由世纪互联运营的MICROSOFT AZURE中国区技术文档网站，请访问 https://docs.azure.cn.

教程：Azure Active Directory 单一登录 (SSO) 与 Contentful 集成Tutorial: Azure Active Directory single sign-on (SSO) integration with Contentful

04/20/2020

本文内容

本教程介绍如何将 Contentful 与 Azure Active Directory (Azure AD) 集成。In this tutorial, you'll learn how to integrate Contentful with Azure Active Directory (Azure AD). 将 Contentful 与 Azure AD 集成后，可以：When you integrate Contentful with Azure AD, you can:

在 Azure AD 中控制谁有权访问 Contentful。Control in Azure AD who has access to Contentful.

让用户使用其 Azure AD 帐户自动登录到 Contentful。Enable your users to be automatically signed-in to Contentful with their Azure AD accounts.

在一个中心位置(Azure 门户)管理帐户。Manage your accounts in one central location - the Azure portal.

先决条件Prerequisites

若要开始操作，需备齐以下项目：To get started, you need the following items:

一个 Azure AD 订阅。An Azure AD subscription. 如果没有订阅，可以获取一个免费帐户。If you don't have a subscription, you can get a free account.

启用了 Contentful 单一登录 (SSO) 的订阅。Contentful single sign-on (SSO) enabled subscription.

方案描述Scenario description

本教程在测试环境中配置并测试 Azure AD SSO。In this tutorial, you configure and test Azure AD SSO in a test environment.

Contentful 支持 SP 和 IDP 发起的 SSOContentful supports SP and IDP initiated SSO

Contentful 支持 恰时 用户预配Contentful supports Just In Time user provisioning

配置 Contentful 后，就可以强制实施会话控制，实时防止组织的敏感数据外泄和渗透。Once you configure Contentful you can enforce session control, which protect exfiltration and infiltration of your organization’s sensitive data in real-time. 会话控制从条件访问扩展而来。Session control extend from Conditional Access.

备注

此应用程序的标识符是一个固定字符串值。The identifier of this application is a fixed string value. 一个租户中只能配置一个实例。Only one instance can be configured in one tenant.

从库中添加 ContentfulAdding Contentful from the gallery

要配置 Contentful 与 Azure AD 的集成，需要从库中将 Contentful 添加到托管 SaaS 应用列表。To configure the integration of Contentful into Azure AD, you need to add Contentful from the gallery to your list of managed SaaS apps.

使用工作或学校帐户或个人 Microsoft 帐户登录到