Set up Single Sign-On (SSO) with Microsoft Entra using SAML

This article shows you how to set up SSO on your Soldo account using the Microsoft Entra identity provider with SAML.

We recommend using OpenID Connect for signing in. It gives you a more reliable experience across devices, including iOS. If you’d like to set up OpenID Connect instead, see the dedicated guide.

If you prefer to continue with SAML, follow the steps below.

Prerequisites

To get started, you will need:

A Microsoft Entra subscription.
A Soldo Plus or Unlimited plan with the SSO Add-on.
One of the following roles in Microsoft Entra:
- Cloud Application Administrator
- Application Administrator

Configuring Soldo application

The configuration can be broken down into 3 key steps:

Create the application
Assign users to the application
Finalise the integration

To complete the SSO configuration, your IT department and Soldo will need to exchange some information:

Soldo will provide:

Identifier (Entity ID)
Reply URL (Assertion Consumer Service URL)

You will need to provide:

App Federation Metadata URL

Note: Full details of where to enter or extract this information can be found in the guide below.

1. Create the application

1.1. Sign in to the Microsoft Entra admin center

Note: You will need to sign in with one of the following roles:

- Cloud Application Administrator
- Application Administrator

1.2. Navigate to Identity Applications > Enterprise applications > All applications.

1.3. Select New application.

1.4. From the Browse Microsoft Entra Gallery screen, select Create your own application.

1.5. Enter a name for your application. For example: Soldo Integration

1.6. Select Create.

1.7. After creating the application, from the left-side menu, select Single sign-on.

1.8. Select SAML.

MicrosoftEntraAddAppEntraApplicationMenuSAML202408_EN.png
1.9. Select tab 1 (Basic SAML Configuration)

MicrosoftEntraAddAppEntraApplicationMenuSAMLConfig_202408_EN.png
1.10. Select Edit.

Note: To complete the next steps, you will require the Identifier (Entity ID) and Reply URL (Assertion Consumer Service URL) provided by Soldo.

1.11. Select Add identifier and insert the Identifier (Entity ID) provided by Soldo.

1.12. Select Add reply URL and insert the Reply URL (Assertion Consumer Service URL) provided by Soldo.

MicrosoftEntraAddAppEntraApplicationMenuSAMLEnterDetails_202408_EN.png
1.13. Select Save.

MicrosoftEntraAddAppEntraApplicationMenuSAMLSaveDetails_202408_EN.png

2. Assign users to application

In order to manage the access to the Soldo application using Entra ID groups you need to modify the Claims.

2.1. Select Attributes & Claims.

MicrosoftEntraAddAppEntraApplicationMenuSAMLAttributesAndClaims_202408_EN.png
2.2. Select Add a group claim.

MicrosoftEntraAddAppEntraApplicationMenuSAMLAttributesAndClaimsAddGroupClaim_202408_EN.png
2.3. Select Groups assigned to the application.

2.4. In the source attribute, select Group ID.

2.5. Select Save.

2.6. From the left-side menu, select Users and groups.

2.7. Select Add user/group.

2.8. Select None Selected.

2.9. Select the desired group from the Users and groups wizard.

Important: It's important to only select groups from the users and groups wizard. Do not select single users.

2.10. Choose Select.

2.11. Select Assign.

Note: The actual configuration for users and groups may be different for your organisation. The details in this guide are provided as an example only.

3. Finalise integration

Note: To finalise the integration of Soldo into Microsoft Entra ID, you must return to Soldo the following information:

- App Federation Metadata Url
- The Group ID of the group or groups assigned to the application

Example of where to find the Group ID:

Example of where to find the App Federation Metadata Url:

MicrosoftEntraAddAppEntraApplicationMenuSAMLCopyFedURL202408_EN.png

0 people voted. Sum of votes: 0