Add, edit or delete an Azure Directory

 

You can add a Google Directory to your list of Directories to manage groups of users for your policies.

Before you begin

You must give Smoothwall access to your Azure Directory:

1. Register Smoothwall as an application. Make a note of your Application (client) ID and Directory (tenant) ID from Azure.
2. Create a client secret. You must copy the Value (not the Secret ID), before navigating away. If you navigate away it will be hidden, so you would need to delete the Client secret and generate a new one.
3. Grant the app permissions for the web API - Grant Admin Consent for the Directory with the Directory.Read.All permission.

Hybrid setup (both Cloud and On-Premise Appliance

If you have a ‘Hybrid’ setup (both Cloud and an On-Premise Appliance), you must add your Azure directory in your On-Premise Appliance because:

• Azure directories added in Cloud only exist in Cloud and are not synced to the On-Premise Appliance.
• Azure directories added in the On-Premise Appliance will sync to Cloud.

Since deleting a directory in the On-Premise Appliance will not delete the directory in Cloud, and you can’t delete directories in Cloud, you would need to:

1. Delete the directory in your On-Premise Appliance.
2. Contact Smoothwall Support to request that we delete the directory from Cloud.

On-Premise Appliance

 

Add an Azure directory

1. Go to Services > Authentication > Directories.
2. Select Add new directory.
3. If you have a ‘Hybrid’ setup (both Cloud and On-Premise Appliance), you’ll see a Directory in Cloud Portal field. Select Enabled to push the directory setup from On-Premise Appliance to Cloud. If you don’t select this checkbox, the directory will exist in On-Premise Appliance only.
4. If you are in a multi-tenant environment, select the tenant.
5. Select the Type as Azure AD.
6. You can use the default name of AzureAD, or change it to your preferred name.
7. Enter your Client ID (Azure Application ID).
8. Enter your Secret (Azure Client Secret value).
9. Enter your Tenant ID (Azure Directory ID).
10. Select Advanced options to sync only users from within a certain Group or a single user.
11. (Optional) Enter a descriptive comment.
12. Select Add.

Your Azure directory will sync automatically with your On-Premise appliance during the next night. If you want to sync immediately, you can run a manual sync. Once the sync with the On-Premise appliance is finished, you will also see the directory in Cloud.

Sync an Azure directory

If you make a change in Azure, you must manually sync with your On-Premise appliance to update it. Syncing with your On-Premise appliance can take up to 2 hours depending on the size of your directory.

1. Go to Services > Authentication > Directories.
2. Hover over the directory and select Sync.

If you have a ‘Hybrid’ setup, the changes will be pushed to Cloud.

Edit or delete an Azure directory

1. Go to Services > Authentication > Directories.
2. Hover over the directory and select Edit or Delete.

When editing, you can choose to deselect the Enabled box to keep the directory but not use it in Smoothwall.

Cloud

Add an Azure directory

1. Go to Admin Panel > Directories.
2. Select Add directory.
3. Select Azure, then Confirm.
4. Enter a name for your directory.
5. If you are in a multi-tenant environment, select All tenants, or Selected tenants and specify the tenant(s).
6. Enter your Client ID (Azure Application ID).
7. Enter your Client Secret (Azure Client Secret value).
8. Enter your Azure Tenant ID (Azure Directory ID).
9. Select Save.

Your Azure directory will sync automatically with your On-Premise appliance during the next night. If you want to sync immediately, you can run a manual sync.

Sync an Azure directory

If you make a change in Azure, you must manually sync with your Smoothwall Cloud to update it. Syncing with Cloud can take up to 10 minutes depending on the size of your directory.

1. Go to Admin Panel > Directories.
2. Select the directory and select Sync Directory.

Edit or delete an Azure directory

1. Go to Admin Panel > Directories.
2. Select the directory from the list to edit it.

Contact Smoothwall Support if you want to delete a directory from Cloud, or keep the directory but not use it in Smoothwall.

Next step

You must map your Directory User Groups to the Smoothwall User Groups to authenticate users and apply Web Filter Policies.