{"id":50345,"date":"2021-08-19T09:00:39","date_gmt":"2021-08-19T07:00:39","guid":{"rendered":"https:\/\/nolabnoparty.com\/?p=50345"},"modified":"2026-04-29T14:05:40","modified_gmt":"2026-04-29T12:05:40","slug":"vmware-uag-configure-azure-mfa-saml","status":"publish","type":"post","link":"https:\/\/nolabnoparty.com\/en\/vmware-uag-configure-azure-mfa-saml\/","title":{"rendered":"VMware UAG: configure Azure MFA (SAML)"},"content":{"rendered":"<p><img decoding=\"async\" class=\"aligncenter wp-image-50346 size-full\" title=\"vmware-uag-configure-azure-mfa-01\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/07\/vmware-uag-configure-azure-mfa-01.jpg\" alt=\"vmware-uag-configure-azure-mfa-01\" width=\"602\" height=\"202\" \/><\/p>\n<p>To secure external accesses in Horizon, you can configure the UAG with Azure MFA leveraging the <strong>SAML-based authentication<\/strong> feature.<\/p>\n<p>Latest Unified Access Gateway (UAG) versions provide the <strong>SAML-based multifactor authentication<\/strong> feature that make the <strong>authentication process stronger<\/strong> utilizing MFA solutions such as Azure MFA.<!--more--><\/p>\n<p>&nbsp;<\/p>\n<h2>Prerequisites<\/h2>\n<p>To configure Azure MFA for the <a href=\"https:\/\/nolabnoparty.com\/en\/vmware-horizon-7-deploy-unified-access-gateway\/\">Unified Access Gateway<\/a>, you need to meet some prerequisites:<\/p>\n<ul>\n<li>An <a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/active-directory\/authentication\/concept-mfa-licensing\" target=\"_blank\" rel=\"noopener\">Azure license<\/a> that includes MFA feature.<\/li>\n<li>A working <a href=\"https:\/\/nolabnoparty.com\/migrare-azure-ad-connect-in-un-nuovo-server\/\">Azure AD Connect<\/a> to synchronize the on-premises Active Directory users into Azure Active Directory.<\/li>\n<li>Azure MFA must be enabled for users or groups.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<h2>Configure the Azure environment<\/h2>\n<p>Login to your <a href=\"https:\/\/portal.azure.com\/\" target=\"_blank\" rel=\"noopener\">Azure portal<\/a> using the global administrative account. Click on <strong>Azure Active Directory<\/strong> icon.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-51153 size-large\" title=\"vmware-uag-configure-azure-mfa-02\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/08\/vmware-uag-configure-azure-mfa-02-600x281.jpg\" alt=\"vmware-uag-configure-azure-mfa-02\" width=\"600\" height=\"281\" \/><\/p>\n<p>Make sure you have the <strong>correct Azure license<\/strong> to leverage MFA capabilities. Select <strong>Enterprise application<\/strong>.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-50350 size-large\" title=\"vmware-uag-configure-azure-mfa-03\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/07\/vmware-uag-configure-azure-mfa-03-600x359.jpg\" alt=\"vmware-uag-configure-azure-mfa-03\" width=\"600\" height=\"359\" \/><\/p>\n<p>Click <strong>New Application<\/strong>.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-50352 size-large\" title=\"vmware-uag-configure-azure-mfa-04\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/07\/vmware-uag-configure-azure-mfa-04-600x239.jpg\" alt=\"vmware-uag-configure-azure-mfa-04\" width=\"600\" height=\"239\" \/><\/p>\n<p>Select <strong>Non-gallery application<\/strong>.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-50354 size-large\" title=\"vmware-uag-configure-azure-mfa-05\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/07\/vmware-uag-configure-azure-mfa-05-600x287.jpg\" alt=\"vmware-uag-configure-azure-mfa-05\" width=\"600\" height=\"287\" \/><\/p>\n<p>Enter the <strong>Name<\/strong> for the new application and click <strong>Add<\/strong>.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-50356 size-large\" title=\"vmware-uag-configure-azure-mfa-06\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/07\/vmware-uag-configure-azure-mfa-06-600x337.jpg\" alt=\"vmware-uag-configure-azure-mfa-06\" width=\"600\" height=\"337\" \/><\/p>\n<p>This article has been written for\u00a0<a href=\"https:\/\/www.starwindsoftware.com\/blog\/\" target=\"_blank\" rel=\"noopener noreferrer\">StarWind blog<\/a>\u00a0and can be found in\u00a0<a href=\"https:\/\/www.starwindsoftware.com\/blog\/vmware-uag-configure-azure-mfa-saml\" target=\"_blank\" rel=\"noopener\">this page<\/a>. It covers the full procedure to <strong>configure Azure MFA (SAML)<\/strong>\u00a0for the VMware UAG used for external accesses to the Horizon infrastructure.<\/p>\n<p>&nbsp;<\/p>\n<h2>Access the Horizon infrastructure<\/h2>\n<p>After configuring Azure MFA, access the <strong>Horizon Portal<\/strong> and select the preferred client to access the infrastructure.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-50528 size-full\" title=\"vmware-uag-configure-azure-mfa-07\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/09\/vmware-uag-configure-azure-mfa-07.jpg\" alt=\"vmware-uag-configure-azure-mfa-07\" width=\"442\" height=\"562\" \/><\/p>\n<p>Enter the user previously configured and click <strong>Next<\/strong>. The user is authenticated in Azure<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-50530 size-full\" title=\"vmware-uag-configure-azure-mfa-08\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/09\/vmware-uag-configure-azure-mfa-08.jpg\" alt=\"vmware-uag-configure-azure-mfa-08\" width=\"442\" height=\"416\" \/><\/p>\n<p>Enter the password and click <strong>Sign in<\/strong>.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-50532 size-full\" title=\"vmware-uag-configure-azure-mfa-09\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/09\/vmware-uag-configure-azure-mfa-09.jpg\" alt=\"vmware-uag-configure-azure-mfa-09\" width=\"442\" height=\"348\" \/><\/p>\n<p>You are now prompted to enter the password for the Active Directory authentication. Click <strong>Login<\/strong>. Because <strong>TrueSSO is not configured<\/strong> in this example, you need to <strong>insert the password twice<\/strong> even if the same user for Horizon and Azure AD has been used.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-50534 size-full\" title=\"vmware-uag-configure-azure-mfa-11\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/09\/vmware-uag-configure-azure-mfa-10.jpg\" alt=\"vmware-uag-configure-azure-mfa-11\" width=\"442\" height=\"562\" \/><\/p>\n<p>The user is authenticated and granted the access to the <strong>Desktop Pool<\/strong> for which it has been entitled.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-50536 size-large\" title=\"vmware-uag-configure-azure-mfa-12\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2021\/09\/vmware-uag-configure-azure-mfa-11-600x515.jpg\" alt=\"vmware-uag-configure-azure-mfa-12\" width=\"600\" height=\"515\" \/><\/p>\n<p>Integrating Microsoft Azure MFA with VMware UAG allows the administrators to <strong>add an extra layer of security<\/strong> to access the Horizon infrastructure and new deployments should <strong>include MFA<\/strong> especially for external accesses.<\/p>\n<p>Read the\u00a0<a href=\"https:\/\/www.starwindsoftware.com\/blog\/vmware-uag-configure-azure-mfa-saml\" target=\"_blank\" rel=\"noopener noreferrer\">full article<\/a>\u00a0on StarWind blog.<\/p>\n<p><img decoding=\"async\" title=\"signature\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/images\/firma.jpg\" alt=\"signature\" \/><\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>To secure external accesses in Horizon, you can configure the UAG with Azure MFA leveraging the SAML-based authentication feature. Latest Unified Access Gateway (UAG) versions provide the SAML-based multifactor authentication feature that make the authentication process stronger utilizing MFA solutions such as Azure MFA.<\/p>\n","protected":false},"author":3,"featured_media":50346,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rop_custom_images_group":[],"rop_custom_messages_group":[],"rop_publish_now":"initial","rop_publish_now_accounts":{"linkedin_93tdZWzMZc_93tdZWzMZc":"","facebook_2879994398731222_17841400390232720":"","twitter_113568041_113568041":"","mastodon_115463926174894442_115463926174894442":""},"rop_publish_now_history":[],"rop_publish_now_status":"pending","footnotes":""},"categories":[1025,2905],"tags":[1682,1711,2265,2250],"class_list":["post-50345","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-horizon-en","category-omnissa-en","tag-azure","tag-horizon","tag-mfa","tag-uag","has_thumb"],"_links":{"self":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts\/50345","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/comments?post=50345"}],"version-history":[{"count":0,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts\/50345\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/media\/50346"}],"wp:attachment":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/media?parent=50345"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/categories?post=50345"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/tags?post=50345"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}