From ac6a5dbeb83fac47101cc709fe44e9d07c0c2c1a Mon Sep 17 00:00:00 2001
From: Stephanie Aurelio <133041642+stephaurelio@users.noreply.github.com>
Date: Wed, 20 Sep 2023 14:41:11 -0700
Subject: [PATCH] Add technical support videos to SSO and SCIM docs (#18245)
* add azure ad videos to sso and scim docs
* add anchor links to surface the video resources
* update video intro
---
layouts/shortcodes/admin-scim.html | 8 ++++++++
layouts/shortcodes/admin-sso-config.md | 8 +++++++-
2 files changed, 15 insertions(+), 1 deletion(-)
diff --git a/layouts/shortcodes/admin-scim.html b/layouts/shortcodes/admin-scim.html
index dd9be61a4e..d47d42b4b4 100644
--- a/layouts/shortcodes/admin-scim.html
+++ b/layouts/shortcodes/admin-scim.html
@@ -61,6 +61,8 @@ Follow the instructions provided by your IdP:
- [Azure AD](https://learn.microsoft.com/en-us/azure/active-directory/app-provisioning/user-provisioning)
- [OneLogin](https://developers.onelogin.com/scim/create-app)
+See [More resources](#more-resources) for a video overview on how to set up SCIM in Azure AD.
+
## Set up role mapping
You can assign [roles](/docker-hub/roles-and-permissions/) to members in your organization in the IdP. To set up a role, you can use optional user-level attributes for the person you want to assign a role. In addition to roles, you can set an organization and team to override the default provisioning values set by the SSO connection.
@@ -95,3 +97,9 @@ If SCIM is disabled, any user provisioned through SCIM will remain in the organi
2. {{ $sso_navigation }}
3. In the SSO connections table, select the **Actions** icon.
4. Select **Disable SCIM**.
+
+## More resources
+
+The following video provides an overview of how to set up SCIM with group mapping in Azure AD.
+
+
diff --git a/layouts/shortcodes/admin-sso-config.md b/layouts/shortcodes/admin-sso-config.md
index 5db6619384..6949643090 100644
--- a/layouts/shortcodes/admin-sso-config.md
+++ b/layouts/shortcodes/admin-sso-config.md
@@ -56,7 +56,7 @@ After your domain is verified, create an SSO connection.
>
> You have to verify at least one domain before creating the connections.
-4. Select an authentication method, **SAML** or **Azure AD (OIDC)**.
+4. Select an authentication method, **SAML** or **Azure AD (OIDC)**. See [More resources](#more-resources) for a video overview on how to set up SSO with SAML in Azure AD.
5. Copy the following fields and add them to your IdP:
- SAML: **Entity ID**, **ACS URL**
@@ -112,6 +112,12 @@ Your users must now sign in to Docker with SSO.
> If SSO isn't enforced, users can choose to sign in with either their Docker ID or SSO.
{ .important}
+## More resources
+
+The following video provides an overview of how to set up SSO with SAML in Azure AD.
+
+
+
## What's next?
- {{ $sso_mgmt_link }}