SAML SSO Configuration on MS Azure Active directory

This article describes the configuration steps required to get the configuration information that you'll use  to enable SSO authentication with MS Active directory.

⚠️ Please read this article for an overview of the whole configuration process.

Step 1: Clustdoc account configuration

Read this article.

Step 2: MS Azure configuration

1) Login to your Azure account and go to Azure Active Directory section

2) In Active directory section, click on the Add button and select Enterprise application

3) In Azure AD Gallery, create a new application

On the right panel, select the Non -gallery option and enter a name for your application. We suggest using ClustdocAuth. Then, click on the Create button. 

Your application has now been created. You’re going to configure it and copy all required information.

4)  Go to the Single sign-on section

5) In the Single sign-on section, select SAML option

6) Edit the basic SAML configuration

Enter the following values :

The subdomain my-clustdoc.subdomain.com is the subdomain you’ll be using in your Clustdoc account. 

7) Now copy the information below 

7.1) Download Certificate (Base64) on your system. Copy the certificate string

7.2) Copy each of the values indicated below

7.3) Copy the attributes that you need to collect (at least email, first name and last name)

Ex : http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress

8) Assign users to your current project. If there is no user existing in your account. Then you need to create one and assign some role(it's necessary). 

⚠️ You should at least assign the admin user created previously.

Step 3: Clustdoc configuration

Enter the following information in the client configuration.

Enter the values copied in the previous section of this article