This short guide will explain how to create an SSO (Single Sign-On) integration for Trustifi with Microsoft Azure using SAML. Creating this integration will allow your users to log into Trustifi using their Microsoft Azure accounts.
Step 1 – Adding a new Azure application
In your Azure admin portal, go to “Enterprise applications” > “All applications” and click to add a new application.
Step 2 – Adding the “Azure AD SAML Toolkit” app
In the search bar, type “Azure AD SAML Toolkit”. Click on the first result you see, and then click “Create” to create the app.
Step 3 – Configuring SAML
After the app has been created, click on the “Get started” link under “Set up single sign-on”.
In the “Select a single sign-on method” screen, select “SAML”.
Under “Basic SAML configuration”, enter the following:
-
- Under “Identifier (Entity ID)” enter: https://trustifi.com
- Under “Reply URL” enter: https://be.trustifi.com/api/o/v1/saml/callback
- Under “Sign on URL” enter: https://be.trustifi.com/api/o/v1/saml/callback
Step 4 – Downloading the metadata XML
Scroll down the configuration page and find the section titled “SAML Certificates”. From here, download the file under “Federation Metadata XML”.
Step 5 – Adding provisioned users/groups
To select which users should be able to sign in using this app integration, click on “Users and groups”. There, you can click on “Add user/group” to select users and groups.
Enabling the integration in Trustifi
Step 6 – Opening the connection window
In the Trustifi admin portal, navigate to either “Outbound Management” or “Inbound Management“, and scroll down to the “Integrations” section.
There you will find the SAML icon, click on it and then click on the “Connect” button.
Step 7 – Adding the necessary information
The connection window will display instructions on how to create the SAML integration. To create the integration in Trustifi, you will need to input some information from your Azure admin portal.
Metadata XML: Upload here the XML you’ve downloaded in step 4.
Domains: Here you simply need to list the domains that will be used in this integration. If there is more than one domain, separate them with a comma.
Step 8 – Confirming and verifying
Confirm all the necessary information has been added and is correct, and click on “Confirm” at the bottom right to continue.
After clicking on “Confirm“, you will need to sign in with your Azure admin credentials to verify the connection.
After you’ve successfully logged in, the SAML integration should be displayed as “Connected“.
