Intro
This guide outlines the main steps for setting up single sign-on (SSO) integration with Microsoft Azure using Security Assertion Markup Language (SAML) 2.0.This guide describes main steps to setup Single sign-on (SSO) integration with Microsoft Azure using SAML 2.0.
Microsoft Azure SSO Configuration
1 . Log in to your Azure portal and navigate to the Enterprise Applications service.
2. Open Application’s Manage page and go to to the Single sign-on setup page
3. Setup Basic SAML Configuration
Enter your whitelabeled Admin Portal or Video Portal URL in the Identifier (Entity ID) field in the following format: https://<whitelabel domain>.
Replace "<whitelabel domain>" with your Admin/Video/Alarm portal whitelabeled URL.
In the "Reply URL" section, add the callback URLs on the 3dEye application side. The URLs must be in the following format: https://<whitelabel domain>/auto/User/SamlCallback. Please note that the Reply URLs must not end with a slash (/).
Sign-on/sign-out URLs are optional, so you can fill them https://<whitelabel domain> or leave them empty.
4.Setup User’s attributes claims
To identify an SSO user, 3dEye’s portals use a user’s email address. Therefore, you must add the user.mail claim in the Attributes & Claims section.
5.SAML Certificate
Add the SAML certificate and download the Base64 file. This file will be used to configure the secret key in the SSO configuration on the 3dEye Admin Portal.
6.Copy the Azure SSO Login and logout URLs, as well as the Microsoft Entra Identifier.
These URLs are required for setting up SSO configuration on the 3dEye Admin Portal
SSO Configuration on Admin Portal
To configure SSO integration, you must be authorized as an Integrator in the Admin Portal. Open the Integrator page, select Single Sign-On, and fill in the Provider fields as shown in the picture below.
Name - custom name for provider
Identity Provider Entity Id - Id of Identity provider, please fill Microsoft Entra Identifier value from your Azure Single Sign-on configuration
Sign-in page URL - fill Login URL value from your Azure Single Sign-on configuration
Sign-out page URL - fill Logout URL value from your Azure Single Sign-on configuration
Secret key - fill downloaded Base64 certificate file content as described above
Click Save