Azure AD setup

These are instructions for setting up Allphins SAML SSO with Azure AD. If you use a different identity provider and need assistance with configuration, please contact our support team.

Create a new application for SSO in Azure Active Directory

1. Go to your administrator Dashboard in Azure Active Directory and click to Active Directory > Enterprise Applications

   

2. Click + Create your own application

   

3. Select the "Integrate any other application you don't find in the gallery" button and type in a relevant name under Name and click Create.

   

4. After this you're redirected to the newly created application Overview, go to Getting started via the left side menu and click Configure single sign-on (or click Single sign-on from the side menu).

   

5. Select SAML as the single sign-on method.

   

6. Click on the pencil icon to Edit step 1, the Basic SAML Configuration.

   

7. In the Basic SAML Configuration add the following values and save:

   • Identifier (Entity ID): https://app.allphins.com/api/v1/sso/saml/

   • Reply URL: https://app.allphins.com/api/v1/sso/saml/YOUR_COMPANY_CODE YOUR_COMPANY_CODE stands for your company subdomain from Allphins - it will be used for generating a unique SSO login URL for your users and is provided directly by the Allphins support team.

     

8. After you saved the settings, click on the pencil icon to Edit step 2, the User Attributes & Claims.

   

9. Under User Attributes & Claims edit the values accordingly and Save. Please enter the values as follow:

   • Name: email / Namespace: Empty / Source: user.mail

   • Name: firstName / Namespace: Empty / Source: user.givenname

   • Name: lastName / Namespace: Empty / Source: user.surname

     

10. From the App settings overview download the Federation Metadata XML, as a result an XML file will be downloaded.

    

11. Send this file to Allphins Support Team