Microsoft Entra Single Sign-On

To configure Microsoft Entra Single Sign-On, you must add a new application in your Microsoft Entra tenant.

1. In the Azure portal, on the left navigation panel, click Microsoft Entra.
2. Select Enterprise applications and then select All applications.
   

   

3. Click New applications to add a new application.
4. In the search box, type the name of the application you want to use, like Microsoft Entra SAML Toolkit, from the result panel. Click Add to add the application.

Configure Microsoft Entra Single Sign-On

1. In the Azure portal, on the newly added application integration page, select Single sign-on.
   

   

2. In the Select a Single sign-on method dialog, select SAML mode.
3. On the Set up Single Sign-On with SAML page, click the edit icon to open the Basic SAML Configuration dialog.
   

   

   • In the Identifier (Entity ID) text box, enter an issuer ID from the SAFEQ Cloud SAML configuration or URL that follows the pattern: https://<domain_name_that_has_saml_configured>:8443/ (if issuer ID is empty).
   • In the Sign on URL text box, enter the login URL: https://<domain_name_that_has_saml_configured>:8443/assertion/saml
   • In the Reply URL text box, enter the URL: https://<domain_name_that_has_saml_configured>:8443/assertion/saml
   • The port is 8443. In environments with reverse proxy, do not specify the port number in the URL. Example: https://<domain_name_that_has_saml_configured>/assertion/saml.
4. Click Single sign-on and then click Edit in the Attributes & Claims section of the page.
   

   

5. Click the claim with the user.groups value. In the dialog window that will be displayed, select Customize the name of the group claim. Enter the name of the group_membership.
   

   

6. Click Save.

Assign the Entra user(s)

1. In the Azure portal, select Enterprise Applications, and then select All applications.
2. In the applications list, select your added application.
3. In the application’s overview page, under the Manage section, select Users and groups.
4. Click Add user, then select Users in the Add Assignment dialog.
5. Type the username you want to have access to, then click Select at the bottom of the screen.
6. In the Add assignment dialog, click Assign.

Setup guides

https://learn.microsoft.com/en-us/entra/identity/saas-apps/saml-toolkit-tutorial