Articles in this section

Setting Up Single Sign-on Using Microsoft Entra ID, formerly Azure AD

Avatar
Envisio Support
  • Updated  
Follow

Envisio supports single sign-on (SSO) logins through SAML 2.0. To set up SSO with ADFS, check out this article here. Follow the steps below to configure Microsoft Entra ID, formerly Azure AD for your users:

 

General Steps

To create the custom connection, we recommend that you set up a sandbox to test the integration.  Follow the steps below and once completed, provide us with your sandbox's APP Federation Metadata URL. Lastly, schedule time with our team to test the integration.

  1. Create a new APP in Entra ID.
  2. Set up SSO.
  3. Set up Attributes and Claims.
  4. Enable and test your integration.
  5. Assign users and groups.

The following sections will guide you through this process.

 

1. Create a new application for SSO in Entra ID

Go to your Microsoft Entra Admin Center and sign in with your administrator credentials.

In the left-hand navigation pane, select Identity > Applications > Enterprise applications.

Click on + New application.

enterpriseapps (1).png

Choose Create your own application.

Enter a name for your application (In this case: "Envisio"), select Integrate any other application you don't find in the gallery (Non-gallery), and click Create.

envisio app (1).png

 

 

2. Configure SAML-based Single Sign-On:

In the application's overview page, under the Manage section, select Single sign-on.

Choose the SAML option.

basicsaml (1).png

In the Basic SAML Configuration section, click the Edit icon. Enter the following details:

a) Set Identifier (Entity ID)

Add a URL with the following format:

Replace the words in red with your assigned sub domain. You can get this information from your Envisio login URL, or contact us.

https://yourorganization.app.envisio.com/corporate/saml/metadata

For sandbox setup, the URL to use is:

https://yourorganization.app.envisio-staging.com/corporate/saml/metadata

b) Set Reply URL (Assertion Consumer Service URL)

In this field, enter the “SAML 2.0 SSO service URL” for your domain

https://yourorganization.app.envisio.com/corporate/saml/acs

Replace the words in red with your assigned sub domain. You can get this information from your Envisio login URL, or contact us.

For sandbox setup, the URL to use is:

https://yourorganization.app.envisio-staging.com/corporate/saml/acs

c) Set Sign on URL

Add a URL with the following format:

Replace the words in red with your assigned sub domain. You can get this information from your Envisio login URL, or contact us.

https://yourorganization.app.envisio.com/corporate/saml/sso

For sandbox setup, the URL to use is:

https://yourorganization.app.envisio-staging.com/corporate/saml/sso

 

 

3. Set Up User Attributes & Claims:

Map the attributes to be exchanged between Entra and Envisio. The following attributes are required by Envisio:

  • department
  • emailaddress
  • first_name
  • job_title
  • last_name

image.png

 

 

4. Generate the Metadata to send to Envisio

In this step, you'll be generating the metadata URL and Federation Metadata XML to provide to Envisio for setup.

Note: When it comes time for the SAML certificate to renew, providing the metadata URL instead of the XML file in this step will automatically be picked up.

 

certificate (1).png

 

5. Assign Users and Test SSO:

Assign users or groups to the application by selecting Users and groups in the application's settings.

usergroups (1).png

 

 

 

That's it for the setup. Now schedule a time with our team and test the integration.

 

Related Articles:

Setting Up Single Sign-on Using Active Directory With ADFS and SAML

Related articles

Comments

0 comments

Please sign in to leave a comment.