Skip to main content

SAML SSO - Azure

The ABsmartly Web Console supports SAML SSO with Azure. This guide will walk you through the steps to get it set up!

Configuring Azure

  1. Go to the Microsoft Entra admin center and sign in with your Azure account.
  2. Click this link or head to Identity > Applications > Enterprise Applications > All applications > New application.
  3. In the Browse Microsoft Entra Gallery page, click + Create your own application.
  4. Name the application ABsmartly and leave the radio button on Integrate any other application you don't find in the gallery (Non-gallery).
  5. Click Create and you will be redirected to the Overview page of your new application.
info

Feel free to add the ABsmartly logo to the application in Properties > Logo.

  1. In the inner left pane, click on Single sign-on and SAML.
  2. Next to Basic SAML Configuration, click Edit and input the following info:
    • Identifier (Entity ID): absmartly-<your-assigned-subdomain>
    • Reply URL (Assertion Consumer Service URL): https://<your-assigned-subdomain>.absmartly.com/auth/saml/azure/callback
    • Sign on URL: https://<your-assigned-subdomain>.absmartly.com
  3. Click Save and close the Basic SAML Configuration panel.
  4. In the User Attributes & Claims section, click Edit and edit the Unique User Identifier (Name ID) (click on its name) with the following:
    • Name identifier format: Email address
    • Source: Attribute
    • Source attribute: user.mail
  5. Click Save and you will be redirected to the Attributes & Claims page.
  6. Add the following new claims (Feel free to delete the default ones):
NameSourceSource attribute
firstNameAttributeuser.givenname
lastNameAttributeuser.surname
departmentAttributeuser.department
  1. The SAML Based Sign-on page should now look like this:
  2. Lastly, in the SAML Certificates section, click to download your Federtion Metadata XML file, send it to us through email or via Slack and we will have your SSO setup ASAP!
info

Don't forget to assign users to the application in the Users and groups section!