How To Set Up Your Own Microsoft App (SAML)
Step 2
Go to Azure Active Directory, and then go to Enterprise Applications.
Step 3
Click New Application
Step 4
- Add a Non Gallery Application
- Give it a name
- Click Add
Alternately, you can choose an existing SAML app from Microsoft.
Step 5
Go to the Single sign-on page and configure the following:
- For Entity ID, enter anything you want. For example, you can enter your company name.
- For Reply URL, enter:
https://api.logonlabs.com/callback - If required, for the Sign on URL enter:
https://api.logonlabs.com/callback
Step 6
For User Attributes, enable the following:
- first name
- last name
Step 7
Download the Federation Metadata XML for the LogonLabs configuration below. Specifically, take note of the Login URL, Identifier (Entity ID) and X.509 Certificate.
Step 8
LogonLabs Setup:
- Go to logonlabs.com
- Click Sign In and authenticate (or Sign Up make a new account and authenticate).
- Navigate to Default Rules (or Domain Rules and open/create a domain module).
- Click on the Microsoft button under Enterprise Identity Providers.
- Choose OpenID Connect.
- Click Add.
- Enter a name.
- Enter a description (optional).
- Enter the Login URL from the setup page in Azure.
- In the Client ID field, enter the Identifier (Entity ID) that you set above.
- In the X.509 Certificate field, enter the X.509 certificate from the Federation Metadata XML document that you downloaded above. Do not include the BEGIN and END tags.
- Click Add.
- Enable Microsoft by clicking the new entry in the Microsoft Identity Providers list.
