Please be aware, this feature is only available on v15.5.1 and above. You can find information about upgrading/patching here.

Pre-Requisites:

As of version 16.0.0 and later, you must setup Graph AD Sync BEFORE you setup your Single Sign In (SSO) configuration.

This requires you have an "Enterprise Application" setup with your secret key in Azure and all your users and groups that you want to have access to your Intranet are already setup inside.

Setup Single Sign On

Complete the following steps to set up Single Sign On using Azure Entra ID

Configure Entra ID

1. Login to https://portal.azure.com and click Manage Microsoft Entra ID
2. On left side menu click Enterprise Applications
   
    
3. Click New Application
   
   
    
4. Click Create your own application
   
   
   
    
5. Set a Name for application and select the Integrate any other application …
   
   
    
6. Click Single Sign-on then Select SAML
   
   
    
7. Click the "Edit" Pencil button inside the box labelled "Basic SAML Configuration".
   
    
8. Set Intranet Home Page address for Identifier and Login Page Address for Reply URL and click Save
   
   Click "Add Identifier" and "Add reply URL" buttons so the form entries appear:
   
   
    
9. Check the configuration
   
    

1. Note: Test Sign in will not work before completing all steps
   

Configure Intranet Application

16. Login with a Superadmin account and select Admin Menu
    
     
17. In Security Tab Click on Authentication Mode
    
    
    
     
18. Check Single Sign-On (SSO) option and Save
    
    
    
     
19. Back to Security Tab and Click on Single Sign On
    
    
    
     
20. In Azure Portal select the application and copy App Federation Metadata Url
    
    
    
     
21. Paste in Metadata XML Url and click Import
    
    
    
     
22. In Azure Portal from Properties copy User access URL
    
    
    
     
23. Paste in Login Url and click Save
    
    
     
24. For Mapping Unknown SSO User to new user or existing one Click on Single Sign-On Mapping
    
    
    
     
25. In Azure Portal select the application and copy App Federation Metadata Url (Repeat step 20)
    
    
     
26. Paste in Metadata XML Url and click Import
    
    
    
     
27. Fill Name ID Field if you need to map Existing User (Entra ID default value is selected in screenshot)
    
    
     
28. Fill Create New User, Person and Employee fields if you need to create New User (Entra ID default values are selected in screenshot)
    
    
     
29. Click Save
    
    
    
     
30. New users can add missing personal information by editing their profiles. Which fields users can edit is controlled in Manage Fields from Directory Tab