Skip to content

How to Configure SAML Authentication for eLegere in Azure

Abstract

This document explains how to configure in Microsoft Azure Cloud the authentication with SAML Single Sign-On (SSO) for eLegere.

Follow the instruction to setup SAML Authentication for your installation.

Requirements

If you satisfy the requirements below, you can undertake this tutorial.

You must own at least one of the following Azure roles:

  • Global Administrator
  • Cloud Application Administrator
  • You are the service principal

Enabling the SAML Authentication for the Application

Follow the steps below to set up SAML Single sign-on (SSO) authentication and download a certificate to configure accounts.

Note

The tutorial assumes that the application is called elegere.saml. Consider it a placeholder for your Azure application.

  1. Sign in the Microsoft Entra admin center.

  2. Click in the Home on Create your own application. Name it elegere.saml (or use any other name you prefer).

  3. Choose Single sign-on from the Manage section on the left side-bar.

  4. Choose SAML as authentication method in the Single sign-on panel.

  5. In the Single sign-on sub-panel, click on Edit in the Basic SAML Authentication section. The action enables to add the parameters for the SSO.

  6. Insert the following parameters:

    1. Decide and type an Identifier. Note it down for step (8).
    2. Type https://[basicURL]/IdentityProvider/auth/external/saml2 in the Reply URL (Assertion Consumer Service URL).
    3. Type https://[basicURL]/ in the Sign on URL (Optional),
    4. Click on the Save button.

  7. Under the Manage section, go to the Users and groups sub-panel. Select which users or groups are enabled for the eLegere authentication through this application.

  8. In the SAML Certificates section in the Single sign-on sub-panel, copy the App Federation Metadata URL. Provide it together with the Identifier from step (6) to your eLegere instance administrator to complete the configuration.

Success

You have enabled the SAML Single sign-on authentication for eLegere on Azure.