Skip to main content

Setting up SSO via an Azure AD enterprise application

Configure SAMLSAML An XML-based standard for exchanging authentication and authorization data between an identity provider and a service provider. Process360 Live supports SAML 2.0 for SSO. SSOSSO An authentication scheme that lets users sign in once with an identity provider and access Process360 Live without re-entering credentials. for an on-premises iGrafx platform using an Azure AD enterprise application.

info

These steps apply to the iGrafx platform Datacenter Edition (on-premises) only. For the cloud solution, follow the Legacy SAML setup guide instead.

Prerequisites​

  • A SAML keystore set up, with the keystore details in igrafx.properties.
  • Access to Enterprise Applications in the Azure portal.

Steps​

  1. In the Azure portal, go to Enterprise Application and select New application.

    The New application button in Azure Enterprise Applications.

  2. Click Create your own application, enter a name, and click Create.

    Creating your own application in Azure.

  3. Select Get started.

    The Get started panel for the new application.

  4. Select SAMLSAML An XML-based standard for exchanging authentication and authorization data between an identity provider and a service provider. Process360 Live supports SAML 2.0 for SSO..

    Selecting SAML as the sign-on method.

  5. Select Edit on the basic SAMLSAML An XML-based standard for exchanging authentication and authorization data between an identity provider and a service provider. Process360 Live supports SAML 2.0 for SSO. configuration.

    The Edit button on the SAML configuration.

  6. Select Add identifier and enter your platform URL with /saml/metadata appended. Add the Reply URL as your platform URL with /saml/SSO, and add the Sign on URL.

    Adding the identifier, reply URL, and sign-on URL.

  7. Click Save.

  8. Copy the App Federation Metadata URL.

    Copying the App Federation Metadata URL.

  9. In your system properties, set the metadata URL (or download the XML from it and upload it under Administration → User Management → SAMLSAML An XML-based standard for exchanging authentication and authorization data between an identity provider and a service provider. Process360 Live supports SAML 2.0 for SSO. → Upload metadata file), the entity ID (shown at the top of the same Azure page), and the SAMLSAML An XML-based standard for exchanging authentication and authorization data between an identity provider and a service provider. Process360 Live supports SAML 2.0 for SSO. profile:

    igrafx.usercentral.saml.metadataurl=YOUR_METADATA_URL
    igrafx.usercentral.saml.entityId=YOUR_ENTITY_ID
    spring.profiles.active=samlsecurity

  10. Confirm samlKeystore.jks is set up and its access details are in igrafx.properties — see Set up a SAML2 keystore.

  11. Restart the platform.

  12. Make sure your NameID (in the Attributes & Claims section) matches the login name of your users in the platform.

  13. If issues arise, follow the debugging steps.