Single Sign-On Service › SSO Getting Started Guide › How to Connect a CA CloudMinder Tenant to an Office 365 Tenant › Overview › Tenant Admin Tasks to Connect a CA CloudMinder Tenant to an Office 365 Tenant › Overview of the Tenant Admin Tasks for Connecting a CA CloudMinder Tenant to an Office 365 Tenant

Overview of the Tenant Admin Tasks for Connecting a CA CloudMinder Tenant to an Office 365 Tenant

This section shows CA CloudMinder Tenant Administrators how to provision users from CA CloudMinder to Office 365, as well as how to configure Single Sign-On to Office 365.

Important! The CSP Administrator needs to complete their tasks before the Tenant Administrator can complete the tasks detailed in this section. Coordinate with your CSP Administrator to make sure their tasks are complete before you start.

The process involves tasks needed for provisioning as well as for single sign-on. These steps, and who performs them, appear below.

Provisioning Steps, and who does them:

• Configure User Provisioning: CSP Administrator
• Configure User Provisioning: Tenant Administrator
• Create Applications and Services: Tenant Administrator

SSO Steps, and who does them:

• Export Signing Certificate: CSP Administrator
• Configure Office 365 for Federation: Office 365 Tenant Administrator, which is actually part of Configure User Provisioning: Tenant Administrator.
• Create Federation Partnership: CSP Administrator

Tenant Admin Prerequisites

Before you begin, you need:

1. A Root domain where you have control over the TXT or MX records. (For example: *.example.com).

   Note: This cannot be a subdomain (ex: sub.example.com)
   and
   This domain must be on the Internet.

2. An Office 365 Tenant:
   1. An Office 365 Plan that supports the following features (see: http://technet.microsoft.com/en-us/library/jj819274.aspx):
      • Use Windows PowerShell to manage Office 365
      • Federated Identity (single sign-on)
   2. An Office 365 Administrator
   3. A public root domain (for example, *.example.com) must be configured and verified from Office 365 Account for an existing domain or buy a new domain.
3. A Windows domain machine:

   Install the following required software:

   • Listed on this page: http://aka.ms/aadposh
   • Microsoft Online Services Sign-In Assistant
   • Windows Azure AD Module for Windows PowerShell
4. A CA CloudMinder Tenant:
   • A Tenant Administrator
   • X.509 Certificate for digitally signing federation assertions

Required Information

You need the following information in multiple places to complete the configuration.