SSO Instructions for Clients using Azure Active Directory

Procedure

1. Please Log in to the Azure Portal and navigate to Enterprise Apps - All Applications.
   
   
    
2. Create an Azure AD Enterprise Non-Gallery Application by following these steps:
   • Click on the "+ New Application" button and select "Create your own application"
   • Give the application a name and click "Create."
     
     
     
     
     
3. After creating the application, go to "Set up single sign on" .
   
   
    
4. Configure Single Sign-On using SAML by following these sub-steps:
    
   • Enable "SAML"
     
     
      
   • In the SAML section, select "Basic SAML Configuration" and edit to provide the following details: 
     Identifier (Entity ID): urn:amazon:cognito:sp:eu-west-2_1w0yxoVbx
   • Configure the Reply URL by adding the following:
     Reply URL: https://emirateshr.auth.eu-west-2.amazoncognito.com/saml2/idpresponse
     
     
     
     
     
      
5. Verify User Attributes & Claims have the default values under "Single sign-on" -> "Attributes & Claims"-> Edit :
   
   
   
   
   
   
   Name identifier format : emailaddress
   Namespace : http://schemas.xmlsoap.org/ws/2005/05/identity/claims 
   Source Attribute: user.userprincipalname 
   
   
   
   Name : givenname
   Namespace : http://schemas.xmlsoap.org/ws/2005/05/identity/claims 
   Source Attribute: user.givenname
   
   
   Name : name
   Namespace : http://schemas.xmlsoap.org/ws/2005/05/identity/claims 
   Source Attribute: user.displayname
   
   
   Name : surname
   Namespace : http://schemas.xmlsoap.org/ws/2005/05/identity/claims 
   Source Attribute: user.surname
   
    
6. Download the Federation Metadata XML from the link under "Single sign-on" - "SAML Certificates."
   
   
7. Kindly share the file with the Yomly Support team.
8. The Yomly Support team would now proceed to update the Business URL to log in using your Azure SSO
   
   

Notes