Set up SSO in Microsoft Entra ID (Step by step guide)

You can set up SSO with Microsoft either using the Manual method or the Metadata URL Method. 

Prerequisites

• Microsoft Entra admin role
• The Edrolo Service Provider values (below)

Manual Method

Step 1: Configuration in Microsoft Entra admin centre

• Microsoft Entra admin centre → Applications → Enterprise applications
• Click + New application → Create your own application, name it “Edrolo”
• Click “Set up single sign on”→”SAML”
• Edit Basic SAML Configuration
• Paste below values into the relevant field
• Identifier (Entity ID): 
  copy👉https://edrolo.com.au
• Reply URL: 
  copy👉https://app.edrolo.com/complete/saml/

Step 2: Configuration in Edrolo Admin Hub

Log in to Edrolo Admin Hub → Authentication → Single sign-on → SAML → Basic SAML Configuration → Edit

As next step: click “Test SAML configuration”

Step 3: Attributes & Claims

Single sign-on → SAML → Attributes & Claims

Click “Unique User Identifier (Name ID)” and set:

Save and close.

Metadata URL Method

1. Open your Microsoft Azure application and create your own SSO application. Name the app as "Edrolo"
2. Click on the Step 2 to setup Single Sign On
3. Click on SAML
4. On "Basic SAML configuration" click on Edit.
   1. Type in Entity ID as https://edrolo.com.au and the Reply URL (ACS) set to https://app.edrolo.com/complete/saml/
   2. In the Attributes and Claims section, click on Edit
   3. Ensure that
      1. The name identifier format is set to "Email address"
      2. The source is ticked in Attributes
      3. The source attributes is set to "user.mail"
   4. Click "Save" at the top of the screen
5. Under SAML Certificates for your Edrolo configuration, copy your App Federation Metadata URL
6. Head to your Edrolo Admin Hub and click on the Authentication page
7. Check that you've understood understood the above information and click "Continue set up"
8. At the bottom of the page, click on "Switch to metadata setup"
9. Paste the App Federation Metadata URL link in the IdP Metadata URL field and click "Preview"
10. Click on "Save SAML Configuration"
11. Check "Enable SSO for all users" and then click on "Save SAML Configuration" again

Need more support?

If you have any questions, please feel free to contact us at help@edrolo.com.au and our friendly Customer Care team will be happy to help.