🔓Set Up SSO (Single Sign On) with Microsoft through Saml

1. Go to portal.azure.com and select the Azure Active Directory service followed by Enterprise applications

   

2. Create a new enterprise app, name it amberSearch - Enterprise Application

3. Set up Single Sign On. Go to the Single sign-on and then select Saml

4. Input Identifier (Entity ID) and Reply URL (Assertion Consumer Service URL). These values are provided separately by the amberSearch Team.

5. Depending on the existing attributes/claims new claims might be needed after consultation with the amberSearch Team. In case of a hybrid setup, where local Active Directory is synchronized with Azure Active Directory add the following claims.

   1. Edit the Attributes & Claims area

   2. Add new claims

      1. Name: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/distinguishedname and Source attribute user.onpremisesdistinguishedname

      2. Name: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/sid and Source attribute user.onpremisesecurityidentifier

   3. Save
6. Go to Properties und set Assignment required to No
7. Create an account for testing purposes, e.g ambersearch@customername.com It will be used for verifying the correctness and maintaining the SSO flow. The credentials of this account should be provided to amberSearch Team.

If you need assistance please reach out to us via IT@ambersearch.de