SAML Setup Steps for Cloud Customers using iGrafx Identity
For Azure AD (Microsoft Entra)
Go to https://portal.azure.com
Search and select Enterprise Application
![step1.png](../__attachments/106725421/step1.png?inst-v=c26cef74-a194-4817-9399-f9ca49c33171)
Click New application
![step2.png](../__attachments/106725421/step2.png?inst-v=c26cef74-a194-4817-9399-f9ca49c33171)
On the Browser Microsoft Entra Gallery page, click Create your own application
Enter a name you want to identify the application with
Select Integrate any other application you don't find in the gallery (Non-gallery)
Click Create
![altstep3a.png](../__attachments/106725421/altstep3a.png?inst-v=c26cef74-a194-4817-9399-f9ca49c33171)
In your newly created Enterprise Application, click the Single sign-on blade to open it.
![step4.png](../__attachments/106725421/step4.png?inst-v=c26cef74-a194-4817-9399-f9ca49c33171)
On the single sign-on blade, select SAML
![step5.png](../__attachments/106725421/step5.png?inst-v=c26cef74-a194-4817-9399-f9ca49c33171)
Click Edit to configure your SAML
![step6.png](../__attachments/106725421/step6.png?inst-v=c26cef74-a194-4817-9399-f9ca49c33171)
Basic SAML Configuration by region
For Europe/EMEA
Identifier (Entity ID of the Service Provider):
https://id.igrafxcloud.eu/realms/igrafx
The specific Reply URL for your iGrafx Process360 Live will be provided to your by iGrafx
Reply URL:https://id.igrafxcloud.eu/realms/igrafx/broker/XXX-idp-1/endpoint
Sign on URL:
https://YOUR_SUBDOMAIN.igrafxcloud.com
Click Save
![image-20240807-222950.png](../__attachments/106725421/image-20240807-222950.png?inst-v=c26cef74-a194-4817-9399-f9ca49c33171)
![image-20240807-223522.png](../__attachments/106725421/image-20240807-223522.png?inst-v=c26cef74-a194-4817-9399-f9ca49c33171)
Rest of the World/NA
Identifier (Entity ID of the Service Provider):
https://id.igrafxcloud.com/realms/igrafx
The specific Reply URL for your iGrafx Process360 Live will be provided to your by iGrafx
Reply URL:https://id.igrafxcloud.com/realms/igrafx/broker/XXX-idp-1/endpoint
Sign on URL:
https://YOUR_SUBDOMAIN.igrafxcloud.com
Click Save
![image-20240807-223208.png](../__attachments/106725421/image-20240807-223208.png?inst-v=c26cef74-a194-4817-9399-f9ca49c33171)
End result should look like this and once this is configured
![image-20240807-223457.png](../__attachments/106725421/image-20240807-223457.png?inst-v=c26cef74-a194-4817-9399-f9ca49c33171)
Commonly, your Attributes & Claims section is configured correctly and can be left unchanged.
You can then get the SAML metadata URL that you will need to provide to iGrafx by clicking the copy button in the section below
Finally, configure your groups and users that are allowed to use SSO with the created Enterprise application
![step9.png](../__attachments/106725421/step9.png?inst-v=c26cef74-a194-4817-9399-f9ca49c33171)