Microsoft Integrations
      Back to home
      1. Flexopus Help Center
      2. Integrations
      3. Microsoft Integrations

      Microsoft Azure Active Directory / Microsoft Entra (SAML2 SSO)

      Learn how to finish the configuration in just a few steps.

      Step 1: Create a new enterprise application

      1. Go to Azure Active Directory and select Enterprise Applications (or use this link)
      2. Choose New application
        enterprise-applications
      3. Choose Create your own application
        Browse-azure-ad-gallery-1
      4. Set a name for the application and select Integrate any other application you don't find in the gallery (Non-gallery)
        create-own-application-2
      5. In your newly created application, link your users and groups to the Flexopus application on the Users and groups page.

      Step 2: Set up SSO login

      1. Choose SAML on the Signle sign-on page.
        test-single-sign-on-3
      2. Edit the Basic SAML Configuration.
        basis-saml-configuarion-1-4
      3. You need to log in at Flexopus. Go to Dashboard > Settings > Authentication. Create a SAML2 Provider and copy the Entity ID and the Reply URL from Flexopus to the AAD. You can find both URLs in the newly created Flexopus SAML2 integration.
        Theoretically, you can connect multiple SAML2 IdPs with Flexopus, for this reason we have a prefix in the URL for each URL separately.

       

      TIP FOR THE SIGN ON URL (OPTIONAL):
      If you also want to make the application available to colleagues through https://myapps.microsoft.com, then you must be sure to complete the Sign On URL. In addition, you must allow the setting "Visible to users" in the Enterprise Application Properties. We recommend this setting. 

      4. Edit User Attributes & Claims
      user-attributes-6

      5. Set Additional Claims

      • Change the name to user.displayname
        name-source-7-png
      • Add upn with the Add new claim button and set it to user.userprincipalname
        upn-source-attribute-png
      • Optionally you can add department with user.department
        department-png
      • Optionally you can add jobtitle with user.jobtitlejobtitle-png

      6. Copy the App Federation Metadata URL

      saml-signing-certificate

      7. Open the authentication settings in your Flexopus tenant

      • Add a new provicer. Choose SAML2
      • Choose the configuration method 'Metadata URL' and paste the copied SAML2 metadata URL
      • Set the label of the login button
      • Save your changes and enable the login

      Settings_-_Flexopus

      Step 3 (optional): Set up SCIM integration

      Use the SCIM guide for this.

      R0051