Configure Azure AD for sso

Create an application

• Go to Azure portal and navigate to Azure Active Directory

• Click on the Enterprise Application item on the left-hand side navigation pane.

• Under the Enterprise application section, create a new application by clicking the ‘+ New Application’ button on the top menu bar.

• Then, click on the ‘Create your Own application’ button on the top menu bar.

• Provide a name to your application and make sure to choose the ‘Non-Gallery’ application mode.

• Click on create.

• Once the application has been created, click on the ‘Single sign-on’ option on the left-hand side navigation pane.

• By default, SSO feature is disabled. Since we need to proceed with SAML based login, click on the SAML widget. Then you would be directed to SAML configurations.

• Fill the following values into their respective SAML configurations in the Azure AD.

Identifier (Entity ID) -> Entity ID which you have generated in above step in the Lineaje Application

Reply URL (Assertion Consumer Service URL) -> Post callback URL which you have generated in above case.

Configure SAML

• Once above configurations are done, click on the ‘Users and Group’ section on the left-hand side navigation pane to allow users who can use above configured SAML configurations to login to their target platform.

• Click on the ‘None Selected’ and select ‘All Users’ to allow every available user in the AD to allow access to the application. Alternatively, you can choose individual users to allow access.

Go Back to ‘Single sign-on’ from left-hand navigation menu and click on the ‘Test’ button to test your SAML configurations.

With the Auth0 configuration which we have done so far, if you were able to get following response in the web browser which means your Azure side configurations are working in a proper way.

Copy the URL in the browser and have it handy. This will be required in the next step.

Configure Lineaje Application with SAML details

• Copy the SAML certificate

• Copy the Login URL

• Login to Lineaje application.

• Goto Setting -> Authentication -> Edit Configuration -> Click on Single Sign On

• Enter the Sign-in url with the LoginURL

• Upload the SAML .cer file

• Veirfy that the callback url is the same as the one during SAML configuration

• Click on Enable sso.