Configure Azure AD for SSO

Configure SAML single sign-on with Microsoft Azure AD.

Configure Azure AD for SSO

Configure a non-gallery enterprise application in Azure AD. Then add its SAML details to Lineaje.

Before You Begin

Collect the following values from Lineaje:

• Entity ID

• Post callback URL

You need Tenant Admin access in Lineaje. You also need permission to create enterprise applications in Azure AD.

Create an Enterprise Application

1. Open the Azure portal and go to Azure Active Directory.

2. Select Enterprise applications.

3. Select New application.

4. Select Create your own application.

5. Enter an application name.

6. Select the non-gallery application option.

7. Select Create.

Configure SAML in Azure AD

1. Open the new enterprise application.

2. Select Single sign-on.

3. Select SAML.

4. Enter the Lineaje values in the SAML configuration:

Identifier (Entity ID) -> Lineaje Entity ID

Reply URL (Assertion Consumer Service URL) -> Lineaje post callback URL

Assign Users and Groups

Assign the Azure AD users and groups that can access Lineaje.

1. Select Users and groups in the enterprise application.

2. Select Add user/group.

3. Select the users or groups to assign.

4. Save the assignment.

Test the SAML Configuration

1. Return to Single sign-on.

2. Select Test.

3. Complete the Azure AD sign-in flow.

4. Copy the resulting browser URL.

Keep this URL available. You need it when configuring Lineaje.

Configure SAML in Lineaje

1. In Azure AD, copy the SAML certificate and Login URL.

1. Sign in to Lineaje.

2. Open Settings → Authentication.

3. Select Edit Configuration → Single Sign-On.

4. Enter the Azure AD Login URL as the sign-in URL.

1. Upload the SAML .cer certificate.

1. Verify that the callback URL matches the URL configured in Azure AD.

1. Select Enable SSO.