Enable SAML SSO with Azure Active Directory

SAML SSO is a paid offering. Please contact the MacStadium Support team or your Account Manager to confirm eligibility to enable SAML SSO.

1. Open Entra ID admin
2. Navigate to “Enterprise applications”

3. Create a new application (click New application)

4. Create your own application (click Create your own application)

a. Enter name (e.g. “MacStadium-Portal”)

b. Select “Integrate any other application you don’t find in the gallery (Non-gallery)”

5. Click “Single sign-on”

6. Select “SAML”

7. Click “Edit” on the “Basic SAML settings”

8. Configure SAML

   1. Identifier (Entity ID): urn:amazon:cognito:sp:us-east-1_pusi8jHs1
   2. Reply URL (Assertion Consumer Service URL): https://idp.macstadium.com/saml2/idpresponse
   3. Logout URL (Optional): https://idp.macstadium.com/saml2/logout
   4. Complete the setup by clicking “Save”
   

9. You will need to add an email attribute and map it to user.mail. Provide our support team with the following:

   1. “App Federation Metadata Url”
   2. Email address claim (e.g. http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress)