Configuring Microsoft Azure SSO for Zesty

Overview

A walkthrough of the required configurations to set up Microsoft Azure SSO and the process to implement it with your Customer Success Manager. A video walkthrough is also available for download.

Prerequisites

• Administrator access to the Azure Portal.

Procedure

1. Go to https://portal.azure.com/signin/index/ and sign in.

2. Select Azure Active Directory from the top row of icons.

3. Click on Enterprise applications in the left hand menu, followed by New Application.

4. Click Create your own application, then do the following:

- ​​​​​​Input a name for your app.

 - Select Integrate any other application you don't find in the gallery (Non-gallery)

 - Click Create. This should take you back to Enterprise applications.​

5. Click the name of your new application and select Single sign-on from the left hand menu, then select SAML as your single sign-on method. This will open your configuration options.

6. Click on Edit under the Basic SAML Configuration and fill in the fields as follows:

    - Identifier (Entity ID): urn:auth0:zesty:connection_name

 - Reply URL (Assertion Consumer Service URL): https://auth.zesty.co/login/callback?connection=connection_name

    - Save and close the window.

7. Click on Edit under Attributes and Claims, then click on the three dots to the right of the Unique User Identifier (Name ID). This will open a Manage claim page, where you will need to fill in the fields as follows:

    - Name identifier format: unspecified

    - Source: attribute

    - Source attribute: user.mail

    - Save changes and delete all Additional claims.

8. Click Add new claim and fill in the fields as follows  

    - Name: email

    - Source: attribute

    - Source attribute: user.email

    - Save changes

9. Add new claim again:

    - Name: name

    - Source: attribute

    - Source attribute: user.email

    - Save changes and exit.

10. Scroll down to SAML Signing Certificate and download Certificate (Base64).

11. Scroll down to Set up [app name]. Copy Login URL and Logout URL.

12. Click on Users and groups in the left hand menu. Click Add user/group at the top of the page and add any users who need access to use the application, then click Assign.

Send your Zesty CSM the following information: downloaded Certificate, Login URL, Logout URL and connection_name.

They will take this and perform some tasks from Zesty's side to complete the process and confirm with you when setup is complete.

To test SAML:

Select Single-sign on from the left hand menu, followed by Test this application at the top of the screen. Click Test sign in.

If everything is configured correctly, you will now see the Zesty dashboard open on your screen.