Skip to main content
All CollectionsAccount, Team & CompanyOther Settings
SAML SSO Configuration on MS Azure Active directory
SAML SSO Configuration on MS Azure Active directory
Updated over a month ago

This article describes the configuration steps required to get the configuration information that you'll use to enable SSO authentication with MS Active directory.

⚠️ Please read this article for an overview of the whole configuration process.

Step 1: Clustdoc account configuration

Step 2: MS Azure configuration

1) Login to your Azure account and go to Azure Active Directory section



2) In Active directory section, click on the Add button and select Enterprise application

3) In Azure AD Gallery, create a new application

On the right panel, select the Non -gallery option and enter a name for your application. We suggest using ClustdocAuth. Then, click on the Create button.

Your application has now been created. You’re going to configure it and copy all required information.

4) Go to the Single sign-on section

5) In the Single sign-on section, select SAML option

6) Edit the basic SAML configuration

Enter the following values :

The subdomain my-clustdoc.subdomain.com is the subdomain you’ll be using in your Clustdoc account.

7) Now copy the information below

7.1) Download Certificate (Base64) on your system. Copy the certificate string

Certificate string

Certificate string

7.2) Copy each of the values indicated below

Login URL

https://xxxxxxxxxxxxxxx

Azure AD Identifier

https://xxxxxxxxxxxxxxx

Logout URL

https://xxxxxxxxxxxxxxx


7.3) Copy the attributes that you need to collect (at least email, first name and last name)

8) Assign users to your current project. If there is no user existing in your account. Then you need to create one and assign some role(it's necessary).

⚠️ You should at least assign the admin user created previously.

Step 3: Clustdoc configuration

Enter the following information in the client configuration.

Enter the values copied in the previous section of this article

Entity ID

Azure AD Identifier (section 7.1)

Login url

Login URL (section 7.2)

Logout url

Logout URL (section 7.2)

Certificate

Certificate string (section 7.2)

Email

Email attribute (section 7.2)

First name

First name attribute(section 7.2)

Last name

Last name attribute (section 7.2)

Did this answer your question?