Setup Microsoft Azure SSO for Swift Digital Suite Log In

This guide explains how to set up SAML SSO with Microsoft Azure and Swift Digital Suite.

 

⚙️ Step by Step: Setting up SSO with Azure AD
 

  1. Log in to your Microsoft Entra ID Account https://portal.azure.com/ as an administrator

  2. Click on More services

  3. Search the Enterprise applications in the filter services

  4. Click on Enterprise applications

  5. Click on + New application

  6. Click on + Create your own application

  7. Input name for your own application, e.g. Swift Digital Suite SSO Configuration in Account Settings

  8. Select Integrate any other application you don’t find in the gallery (Non-gallery)

  9. Click on the Create button

  10. Under the Get Started section, click on 2. Set up single sign-on

  11. Click on SAML

  12. Click on the Edit icon under Basic SAML Configuration

  13. Log in to your Swift Digital Suite account as an administrator

  14. Go to SSO SETUP in Account Settings within the Administration module

  15. Copy the fields from the Swift Digital Suite Service Provider Details to the Basic SAML Configuration in Azure

    • Service Provider Entity ID = Identified (Entity ID)

    • Reply URL (Assertion Consumer Service URL) = Reply URL (Assertion Consumer Service URL)

    • Sign On URL = Sign on URL (Optional)

    • Single Logout (SLO) URL = Logout Url (Optional)

  16. Click on Save

  17. Copy the Microsoft Entra Identifier from Step 4 of Single Sign-On in Azure and paste it into the IdP Entity ID field in the Suite

  18. Copy the Login URL from Step 4 of Single Sign-On in Azure and paste it into the IdP SSO Login URL in the Suite

  19. Download the Certificate (Base64) in Azure

  20. Open the Certificate (Base64)

  21. Copy the SAML Signing Certificate (without -----BEGIN/END CERTIFICATE----- lines) and paste it into the IdP X.509 Certificate in the Suite

  22. Click on Edit on Attribute & Claims in Azure

  23. These should be the default values for User Attributes & Claims

Claim name                                                             Value
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress     user.mail
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname        user.givenname
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name             user.principalname
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname          user.surname
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/mobilephone      user.mobile.ph
  1. Copy http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress from Step 21 and paste it into the Email Attribute Name in the Suite

  2. Click on Save Settings This will save the SSO configuration.

  3. You must now add accounts to your Azure AD application

  4. Go to the Users and groups page

  5. Click on + Add user/group

  6. Click on Users

  7. Select the users you want to add on the right slide-in panel

  8. Click Select at the bottom of the slide-in panel

  9. Click Assign in the bottom left corner of the screen

 

You're done. Now test SSO using Microsoft.

 

👉 Next step

See Test the Microsoft Azure SSO for Swift Digital Suite Log In

Have more questions? Submit a request

0 Comments

Please sign in to leave a comment.