This guide explains how to set up SAML SSO with Microsoft Azure and Swift Digital Suite.
⚙️ Step by Step: Setting up SSO with Azure AD
Log in to your Microsoft Entra ID Account https://portal.azure.com/ as an administrator
-
Click on More services
Search the Enterprise applications in the filter services
-
Click on Enterprise applications
-
Click on + New application
Click on + Create your own application
Input name for your own application, e.g. Swift Digital Suite SSO Configuration in Account Settings
Select Integrate any other application you don’t find in the gallery (Non-gallery)
-
Click on the Create button
-
Under the Get Started section, click on 2. Set up single sign-on
-
Click on SAML
-
Click on the Edit icon under Basic SAML Configuration
Log in to your Swift Digital Suite account as an administrator
Go to SSO SETUP in Account Settings within the Administration module
-
Copy the fields from the Swift Digital Suite Service Provider Details to the Basic SAML Configuration in Azure
Service Provider Entity ID = Identified (Entity ID)
Reply URL (Assertion Consumer Service URL) = Reply URL (Assertion Consumer Service URL)
Sign On URL = Sign on URL (Optional)
Single Logout (SLO) URL = Logout Url (Optional)
Click on Save
-
Copy the Microsoft Entra Identifier from Step 4 of Single Sign-On in Azure and paste it into the IdP Entity ID field in the Suite
-
Copy the Login URL from Step 4 of Single Sign-On in Azure and paste it into the IdP SSO Login URL in the Suite
Download the Certificate (Base64) in Azure
Open the Certificate (Base64)
-
Copy the SAML Signing Certificate (without -----BEGIN/END CERTIFICATE----- lines) and paste it into the IdP X.509 Certificate in the Suite
-
Click on Edit on Attribute & Claims in Azure
These should be the default values for User Attributes & Claims
Claim name Value
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress user.mail
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname user.givenname
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name user.principalname
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname user.surname
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/mobilephone user.mobile.ph-
Copy http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress from Step 21 and paste it into the Email Attribute Name in the Suite
Click on Save Settings This will save the SSO configuration.
You must now add accounts to your Azure AD application
Go to the Users and groups page
-
Click on + Add user/group
Click on Users
Select the users you want to add on the right slide-in panel
-
Click Select at the bottom of the slide-in panel
-
Click Assign in the bottom left corner of the screen
You're done. Now test SSO using Microsoft.
👉 Next step
See Test the Microsoft Azure SSO for Swift Digital Suite Log In
0 Comments