Skip to main content

SAML SSO - Azure

The ABsmartly Web Console supports SAML SSO with Azure. This guide will walk you through the steps to get it set up!

Configuring Azure​

  1. Go to the Microsoft Entra admin center and sign in with your Azure account.
  2. Click this link or head to Identity > Applications > Enterprise Applications > All applications > New application.
A screenshot of the New application button
  1. In the Browse Microsoft Entra Gallery page, click + Create your own application.
A screenshot of the Create application button
  1. Name the application ABsmartly and leave the radio button on Integrate any other application you don't find in the gallery (Non-gallery).
A screenshot of the completed 'New application' form
  1. Click Create and you will be redirected to the Overview page of your new application.
info

Feel free to add the ABsmartly logo to the application in Properties > Logo.

The ABsmartly logo
  1. In the inner left pane, click on Single sign-on and SAML.
A screenshot of the Single sign-on and SAML buttons

  1. Next to Basic SAML Configuration, click Edit and input the following info:

    • Identifier (Entity ID): absmartly-<your-assigned-subdomain>
    • Reply URL (Assertion Consumer Service URL): https://<your-assigned-subdomain>.absmartly.com/auth/saml/azure/callback
    • Sign on URL: https://<your-assigned-subdomain>.absmartly.com
    A screenshot of the Basic SAML Configuration panel and the Edit button
    A screenshot of the Basic SAML Configuration panel with the Identifier, Reply URL, and Sign on URL filled in

  2. Click Save and close the Basic SAML Configuration panel.

  3. In the User Attributes & Claims section, click Edit and edit the Unique User Identifier (Name ID) (click on its name) with the following:

    • Name identifier format: Email address
    • Source: Attribute
    • Source attribute: user.mail
    A screenshot of the User Attributes & Claims panel and the Edit button
    A screenshot of the list of attributes with the Unique User Identifier (Name ID) highlighted
    A screenshot of the Unique User Identifier (Name ID) panel with the Name identifier format, Source, and Source attribute filled in

  4. Click Save and you will be redirected to the Attributes & Claims page.

  5. Add the following new claims (Feel free to delete the default ones):

NameSourceSource attribute
firstNameAttributeuser.givenname
lastNameAttributeuser.surname
departmentAttributeuser.department
A screenshot of the Add new claim button
  1. The SAML Based Sign-on page should now look like this:
A screenshot of the completed SAML Based Sign-on page
  1. Lastly, in the SAML Certificates section, click to download your Federtion Metadata XML file, send it to us through email or via Slack and we will have your SSO setup ASAP!
A screenshot of the SAML Certificates section with the Download button highlighted
info

Don't forget to assign users to the application in the Users and groups section!

A screenshot of the Users and groups section