Skip to main content

Setting up SSO via a Microsoft Entra ID enterprise application

Configure SAMLSAML An XML-based standard for exchanging authentication and authorization data between an identity provider and a service provider. Process360 Live supports SAML 2.0 for SSO. SSOSSO An authentication scheme that lets users sign in once with an identity provider and access Process360 Live without re-entering credentials. for an on-premises iGrafx platform using a Microsoft Entra ID (formerly Azure AD) enterprise application.

info

These steps apply to the iGrafx platform Datacenter Edition (on-premises) only. For the cloud solution, follow the Legacy SAML setup guide instead.

Prerequisites​

  • A SAML keystore set up, with the keystore details in igrafx.properties.
  • Access to Enterprise applications in the Azure portal.

Steps​

  1. In the Azure portal, go to Enterprise applications and select New application.

    The New application button in Enterprise applications.

  2. Click Create your own application, enter a name, and click Create.

    Creating your own application in the Azure portal.

  3. Select Get started.

    The Get started panel for the new application.

  4. Select SAMLSAML An XML-based standard for exchanging authentication and authorization data between an identity provider and a service provider. Process360 Live supports SAML 2.0 for SSO..

    Selecting SAML as the sign-on method.

  5. Select Edit on the basic SAMLSAML An XML-based standard for exchanging authentication and authorization data between an identity provider and a service provider. Process360 Live supports SAML 2.0 for SSO. configuration.

    The Edit button on the SAML configuration.

  6. Select Add identifier and enter your platform URL with /saml/metadata appended. Add the Reply URL as your platform URL with /saml/SSO, and add the Sign on URL.

    Adding the identifier, reply URL, and sign-on URL.

  7. Click Save.

  8. Copy the App Federation Metadata URL.

    Copying the App Federation Metadata URL.

  9. On the Users and groups tab, assign the users and groups who sign in to iGrafx.

  10. In the platform, go to Administration → User Management → SAMLSAML An XML-based standard for exchanging authentication and authorization data between an identity provider and a service provider. Process360 Live supports SAML 2.0 for SSO., select Update Identity Provider Metadata, and add the metadata URL.

  11. Activate the samlsecurity profile — see Configuring authentication.

  12. Confirm samlKeystore.jks is set up and its access details are in igrafx.properties — see Set up a SAML2 keystore.

  13. Restart the platform.

  14. Make sure your NameID (in the Attributes & Claims section) matches the login name of your users in the platform.

  15. If issues arise, follow the debugging steps.