Entra ID SSO Setup

Netacea will supply you with the following before you start:

  • Single sign-on URL

  • Audience URI (SP Entity ID)

Configuration

  • Go to the Azure portal and open All applications

  • Click on New application

  • Click on Create your own application

  • A panel will be opened on the right hand side, fill the following details

  • What's the name of your app? : Netacea Portal

  • Click on Create

  • Application added successfully

  • Select Users and groups from Manage

  • Click on None Selected available under Users and select the users to whom you want to assign the app

  • Update the Identity for Users by opening user from Users ang groups

    • Click on Edit properties

    • Under Entity fill in the details for attribute mapping hit save. Perform the same action for all users

Examples shown in table below.

User Pool Attribute (Netacea / AWS Cognito)

SAML Attribute (Microsoft Entra ID)

name

name

given_name

givenname

family_name

surname

email

emailaddress

username

name

These data mappings are used to correctly display usernames, send portal notifications to associated email addresses, and are used in Netacea’s Audit Trail feature to identify which actions were taken by who and when. User mappings are created automatically when a user logs into the Netacea Portal via SSO - and can be removed either by request, or through the User Management section of Netacea’s Portal.

  • Click on Single sign-on and then click on SAML

  • Fill the mandatory details:

    • Paste in the Audience URI provided by Netacea in Identifier (SP Entity ID)

  • Paste Single sign-on URL provided by Netacea in Reply URL (Assertion Consumer Service URL)

  • Leave the optional fields as they are

  • Click on Save

  • Copy the App federation Metadata URL and add this to the Single Sign On setup page in the Netacea Portal

Testing

It is recommended to configure SSO in a separate incognito mode window of your browser. This way, you keep the session in the standard window, allowing you to switch off the SSO authorization in case something is misconfigured.

Check out the FAQs for answers to some common issues

Last updated