Skip to main content
All CollectionsIntegrations
How do I integrate SSO for Azure Active Directory (AD)?
How do I integrate SSO for Azure Active Directory (AD)?
D
Written by Damon Toey
Updated over a year ago

Azure Initial Setup

  1. Login to Azure.

  2. Visit the Enterprise Applications page.

  3. Select “Create a New Application”, then on the following page, select “Create your own application”.

  4. On the pop-up, give a new application a name (“Halo Security”), and select the “Integrate any other application you don't find in the gallery (Non-gallery)” option. Click the “Create” button.

  5. On the “Overview” page, click “1. Assign users and groups” and select the users from Azure AD that will have access to the application.

  6. Then click “2. Set up single sign-on”. Choose “SAML” for the type of SSO.

Azure SAML SSO Setup

  1. Edit the “Basic SAML Configuration”, then in a separate tab, open the Halo Security SAML Authentication Settings. Fill in the following fields using the predefined values from Halo SAML Settings:

    1. Identifier (Entity ID) -> Entity ID

    2. Reply URL (Assertion Consumer Service URL) -> ACS URL

    3. Logout Url (Optional) -> Logout URL

  2. Edit “Attributes & Claims”. Create 2 new claims with the following values:

    1. Name: first_name

      1. Namespace: <empty>

      2. Source: attribute

      3. Source Attribute: user.givenname

    2. Name: last_name

      1. Namespace: <empty>

      2. Source: attribute

      3. Source Attribute: user.surname

  3. Save the claims and return to the “Halo Security | SAML-based Sign-on” overview.

Halo SAML Setup

  1. Navigate to the “Single-sign-on” view under “Manage” within AZURE.

    1. Download “Certificate (Base64)” copy value into "Certificate" within HALO.

    2. Copy the "Azure AD Identifier" value into "Issuer Entity ID" within HALO.

      1. https://sts.windows.net/XXX/

  2. Navigate to the "Properties" view under "Manage" within Azure.

    1. Copy the "User access URL" value into "SAML URL ID" within HALO.

      1. https://XXX.microsoft.com/signin/XXX?tenantId=XXX

  3. Done

Did this answer your question?