Configuring Entra ID (Azure Active Directory) for SSO

1. Log in to your Azure dashboard as an administrator.

2. Navigate to the Azure Active Directory dashboard. Remember to share your authentication domain, in the case below onmicrosoft.com, with Osano.

3. Navigate to "Enterprise applications".

4. Click the "Create your own application" button.

5. Fill in an application name, such as "Osano" and click the "Create" button.

6. Assign users and or groups to your application, then move on to "Set up single sign on".

7. Select SAML for your single sign-on method.!

8. Configure your SAML SSO with the following fields:!

9. Identifier (Entity ID)

      urn:amazon:cognito:sp:us-east-1_7GtagkRKw

1. Reply URL

      <https://auth.osano.com/saml2/idpresponse>

   <https://my.osano.com/oauth/response>

1. In the "Attributes and Claims" section, check that claims with the following names exist:

2. https://schemas.xmlsoap.org/ws/2005/05/identity/claims/name

3. https://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress

4. Each of the above can be given a value of:

      user.userprincipalname

1. Provide this metadata document to your Osano Support Representative.