Azure application with SAML Authentication

Prerequisites:

1. Azure AD Subscription: Ensure you have an active Azure AD subscription.
2. Administrator Access: Ensure you have the necessary permissions to create and configure enterprise applications in Azure AD.
3. Platform Details: Collect SAML configuration details (e.g., Entity ID, Assertion Consumer Service URL) from the platform you want to integrate with.

Steps:

1. Create an Enterprise Application in Azure

1. Sign in to the Azure Portal:
2. • Navigate to Azure Portal.
   • Sign in with your administrator account.
3. Navigate to Azure Active Directory:
4. • In the left-hand navigation pane, click on "Azure Active Directory".
5. Create a New Enterprise Application:
6. • Under "Manage", click on "Enterprise applications".
   • Click on "New application".
   • Select "Create your own application".
   • Enter a name for your application, select "Integrate any other application you don't find in the gallery", and click "Create".

2. Configure SAML-based Single Sign-On (SSO)

1. Setup Single Sign-On:
2. • In the application pane, under "Manage", click on "Single sign-on".
   • Select the "SAML" authentication method.
3. Basic SAML Configuration:
4. • Click on "Edit" to configure the basic SAML settings.
   • Enter the Identifier (Entity ID) and Reply URL (Assertion Consumer Service URL) provided by the Bluevolt platform.
   • Optionally, enter Sign on URL if required by the platform.
   • Click "Save".
5. User Attributes & Claims:
6. • Configure user attributes and claims to match what the Bluevolt platform expects, the following are mandatory, the other ones are optional:
   • • firstname*
     • lastname*
     • emailaddress*
     • Unique User Identifier*

1. SAML Signing Certificate:
2. • Download the Federation Metadata XML or the Certificate (Base64). This will be needed to configure SAML in the Bluevolt platform.

5. Assign Users and Groups

1. Assign Users to the Application:
2. • In Azure AD, navigate back to your enterprise application.
   • Under "Manage", click on "Users and groups".
   • Click on "Add user/group".
   • Select the users and/or groups you want to assign to this application and click "Assign".

6. Verify and Monitor the Setup

1. Test the Integration:
2. • Ask a test user to log in to the other platform using the Azure AD credentials.
   • Verify that SAML authentication works correctly.
3. Monitor the Application:
4. • Regularly monitor sign-in activities and logs for the enterprise application in Azure AD to ensure everything is functioning as expected.

Troubleshooting Tips:

• Incorrect SAML Response: Verify that the claims and attributes sent in the SAML response match what the other platform expects.
• Certificate Issues: Ensure that the SAML signing certificate is correctly uploaded and not expired.
• User Assignment: Ensure that users are assigned to the application in Azure AD.

Conclusion