MCAS in an iFrame

%3CLINGO-SUB%20id%3D%22lingo-sub-946506%22%20slang%3D%22en-US%22%3EMCAS%20in%20an%20iFrame%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-946506%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20have%20a%20requirement%20to%20serve%20up%20MCAS%20in%20an%20iFrame%20of%20a%20web%20application%20hosted%20outside%20of%20Azure.%26nbsp%3B%20In%20order%20to%20do%20so%20I%20need%20to%20configure%20SSO%20with%20my%20external%20IdP.%20Could%20someone%20tell%20me%20if%20SSO%20with%20an%20external%20provider%20is%20possible%20with%20MCAS%3F%20And%20if%20so%2C%20the%20proper%20steps%20to%20get%20it%20done%3F%26nbsp%3B%3C%2FP%3E%3CP%3EIt%20has%20been%20suggested%20that%20I%20wrap%20the%20application%20with%20a%20non-gallery%20application%20within%20Azure%20AD%2C%20but%20I%20am%20not%20sure%20how%20to%20configure%20the%20endpoints%20considering%20MCAS%20is%20an%20OpenId%20application.%3C%2FP%3E%3CP%3EAny%20help%20is%20greatly%20appreciated.%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3CP%3EChris%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-946506%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ECloud%20App%20Security%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-963719%22%20slang%3D%22en-US%22%3ERe%3A%20MCAS%20in%20an%20iFrame%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-963719%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F429160%22%20target%3D%22_blank%22%3E%40chris760%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThis%20is%20not%20possible%20since%20MCAS%20requires%20Azure%20AD%20as%20source%20of%20authority%20and%20relies%20on%20Azure%20AD%20identities.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor

We have a requirement to serve up MCAS in an iFrame of a web application hosted outside of Azure.  In order to do so I need to configure SSO with my external IdP. Could someone tell me if SSO with an external provider is possible with MCAS? And if so, the proper steps to get it done? 

It has been suggested that I wrap the application with a non-gallery application within Azure AD, but I am not sure how to configure the endpoints considering MCAS is an OpenId application.

Any help is greatly appreciated.

Thanks

Chris

 

1 Reply

@chris760 

 

This is not possible since MCAS requires Azure AD as source of authority and relies on Azure AD identities.