Skip to main content
  1. Addigy
  2. Integrations
  3. SSO/2FA

Enabling The Addigy Log-In Experience With Microsoft Entra SSO (SAML)

Updated:

The Microsoft Entra single sign-on (SSO) Integration enables secure authentication, leveraging managed Microsoft Entra ID credentials to access the Addigy portal.

Note: The instructions below use the previous Microsoft name of Azure.

Table of Contents

Prerequisites

  1. Important: The new Log-In Experience feature only supports Service Provider Initiated (SP-Initiated SSO).
  2. Azure is required.
  3. Azure Admin access is required to configure the integration.
  4. The Create and Edit Integration privileges are required in Addigy to configure the Azure Single Sign-on integration.
  5. Please ensure that you use the same email address associated with your Addigy account.

Overview

Create an Enterprise App within your Azure portal

  1. Start by selecting Enterprise Applications. You can do this by typing Enterprise Applications in your search bar:
    Pasted_Image_4_26_23__9_47_AM.png
  2. Select New Application:
    Pasted_Image_6_23_22__6_30_PM.png

  3. Select Create your own application, then select integrate any other application you don't find in the gallery:

    Pasted_Image_6_23_22__6_35_PM.png
    Pasted_Image_6_23_22__6_35_PM.png

Set up Single Sign-On

  1. Select Set up single sign on:
    Pasted_Image_4_26_23__9_49_AM.png
  2. Select SAML:
  3. 5 steps will be displayed to set up SSO. For Step 1, Azure requires the Entity ID and ACS URL. 
    Pasted_Image_4_26_23__9_52_AM.png

    Select the Edit icon for Step 1. The Basic SAML Configuration form will appear. The Entity ID and ACS URL are available in the Addigy Console > Accounts > Integrations > Log In Options > Azure:Addigy___Integrations.png

  4.  The "Default" checkboxes next to the Identifier (Entity ID) and Reply URL (Assertion Consumer Service URL) fields should be checked. 
    Basic_SAML_Configuration_-_Microsoft_Azure.png
    Note: To test the SAML Application, add your tenant's login URL to the Sign on URL field and append "https://". The Addigy login URL is located in Account > Settings.
    Pasted_Image_4_6_23__1_24_PM.png
  5. Edit Attributes & Claims in Step 2. 
    When you select EDIT for the User Attributes & Claims, you'll see this initially:
    To achieve correct Attributes and Claims, delete any existing claims except for the Required Claim.
  6. Create new claims by selecting Add New Claim, shown in the image above.
  7. When filling out a new claim, the Namespace should be completely empty for each claim:
    Manage_claim_-_Microsoft_Azure.pngAfter configuring the claims correctly, step two should look like this:
    BB_Auth0_Prod_Intern_Test_-_Microsoft_Azure.png
  8. Next, upload a PEM certificate into Addigy. Scroll to Step 3 in Azure and click Edit:
    BB_Auth0_Prod_Intern_Test_-_Microsoft_Azure.pngClick on the three dots lined up horizontally at the end of your certificate and download the PEM certificate.
    Pasted_Image_6_23_22__6_01_PM.png

Update SAML Information In Addigy

  1. Upload the PEM certificate into the Addigy Azure SSO integration.
    Note: If any changes are made within Azure, a new .pem file will need to be uploaded.
    Addigy___Integrations.png
  2. In Azure, scroll down to Step 4 and copy the SSO URL (Login URL in Azure) into Addigy.
  3. Make sure the users who will be logging into the Addigy Console are assigned to the Application in Azure.
  4. Before testing the integration from Azure, ensure that it has been toggled on in Addigy.
    Important Note: We recommend testing your configuration in a separate browser.

Signing In

When signing in using Azure SSO as part of the login experience, you'll be able to sign into your Addigy portal with your Microsoft credentials:
Pasted_Image_6_23_22__6_23_PM.png

Was this article helpful?
2 out of 7 found this helpful
Return to top

Didn’t find what you’re looking for?

Contact our Support Team