Enabling The Addigy Log-In Experience With Microsoft Entra SSO (SAML)

Overview

• Create an Enterprise App within your Azure portal
• Set up Single Sign-On
• Update SAML Information In Addigy
• Signing In

Create an Enterprise App within your Azure portal

1. Start by selecting Enterprise Applications. You can do this by typing Enterprise Applications in your search bar:
   
2. Select New Application:
   

3. Select Create your own application, then select integrate any other application you don't find in the gallery:

   
   

Set up Single Sign-On

1. Select Set up single sign on:
   
   
2. Select SAML:
   
   
3. Five steps will be displayed to set up SSO. For Step 1, Azure requires the Entity ID and ACS URL. 
   
   

   Select the Edit icon for Step 1. The Basic SAML Configuration form will appear. The Entity ID and ACS URL are available in the Addigy Console > Account > Integrations > Addigy Add-ons > Azure SSO:

4.  The "Default" checkboxes next to the Identifier (Entity ID) and Reply URL (Assertion Consumer Service URL) fields should be checked. 
   
   Note: To test the SAML Application, add your tenant's login URL to the Sign on URL field and append "https://". The Addigy login URL is located in Account > Settings.
   
5. Edit Attributes & Claims in Step 2. 
   When you select EDIT for the User Attributes & Claims, you'll see this initially:
   To achieve correct Attributes and Claims, delete any existing claims except for the Required Claim.
6. Create new claims by selecting Add New Claim, shown in the image above.
7. When filling out a new claim, the Namespace should be completely empty for each claim:
   After configuring the claims correctly, step two should look like this:
   
8. Next, download the PEM certificate for upload to Addigy. Scroll to Step 3 in Azure and click Edit:
   Click on the three dots lined up horizontally at the end of your certificate and download the PEM certificate.
   

9. Assign users to the SAML application

   • Browse to Identity > Applications > Enterprise applications > All applications.
   • In the left pane, select Users and groups, and then select Add user/group.
   • On the Add Assignment pane, select None Selected under Users and groups.

• Search for and select the user that you want to assign to the application. For example, contosouser1@contoso.com.
• Select Select.
• Select None Selected under Select a role and then select the role that you want to assign to the user. For example, Standard User.
• Select Select.
• Select Assign at the bottom of the pane to assign the user to the application.

Update SAML Information In Addigy

1. Upload the PEM certificate into the Addigy Azure SSO integration.
   Note: If any changes are made within Azure, a new .pem file will need to be uploaded.
   
2. In Azure, scroll down to Step 4 and copy the SSO URL (Login URL in Azure) into Addigy.
3. Make sure the users who will be logging into the Addigy Console are assigned to the Application in Azure.
4. Before testing the integration from Azure, ensure that it has been toggled on in Addigy.
   Important Note: We recommend testing your configuration in a separate browser.

Signing In

When signing in using Azure SSO as part of the login experience, you'll be able to sign into your Addigy portal with your Microsoft credentials: