This article describes the configuration steps required to get the configuration information that you'll use to enable SSO authentication with MS Active directory.
⚠️ Please read this article for an overview of the whole configuration process.
Step 1: Clustdoc account configuration
Read this article.
Step 2: MS Azure configuration
1) Login to your Azure account and go to Azure Active Directory section
2) In Active directory section, click on the Add button and select Enterprise application
3) In Azure AD Gallery, create a new application
On the right panel, select the Non -gallery option and enter a name for your application. We suggest using ClustdocAuth. Then, click on the Create button.
Your application has now been created. You’re going to configure it and copy all required information.
4) Go to the Single sign-on section
5) In the Single sign-on section, select SAML option
6) Edit the basic SAML configuration
Enter the following values :
Identifier (Entity ID) | |
Reply URL (Assertion Consumer Service URL) |
The subdomain my-clustdoc.subdomain.com is the subdomain you’ll be using in your Clustdoc account.
7) Now copy the information below
7.1) Download Certificate (Base64) on your system. Copy the certificate string
Certificate string | Certificate string |
7.2) Copy each of the values indicated below
Login URL | https://xxxxxxxxxxxxxxx |
Azure AD Identifier | https://xxxxxxxxxxxxxxx |
Logout URL | https://xxxxxxxxxxxxxxx |
7.3) Copy the attributes that you need to collect (at least email, first name and last name)
First name | http://schemas.xmlsoap.org/ws/2005/05/identity/claims/{first name attribute} |
Last name | http://schemas.xmlsoap.org/ws/2005/05/identity/claims/{last name attribute} |
8) Assign users to your current project. If there is no user existing in your account. Then you need to create one and assign some role(it's necessary).
⚠️ You should at least assign the admin user created previously.
Step 3: Clustdoc configuration
Enter the following information in the client configuration.
Enter the values copied in the previous section of this article
Entity ID | Azure AD Identifier (section 7.1) |
Login url | Login URL (section 7.2) |
Logout url | Logout URL (section 7.2) |
Certificate | Certificate string (section 7.2) |
Email attribute (section 7.2) | |
First name | First name attribute(section 7.2) |
Last name | Last name attribute (section 7.2) |