Azure Active Directory SSO Integration

Configure Azure Active Directory as SAML Identity Provider:

Add an enterprise application

To add an enterprise application to your tenant:

1. Sign in to your Azure Account through the Azure portal.

2. Select Azure Active Directory.

3. Select Enterprise applications.

4. Select New application.

5. Select Create your own application.

6. Name the application, and Create.

Assign users and groups

Only the assigned users/groups will be able to sign in to this application.

Setup Single sign-on

Basic SAML Configuration

1. Select Edit.
2. Setup the below and Save.

Obtain Federation Metadata XML

1. Go to SAML Signing Certificate.
2. Download Federation Metadata XML (to be imported as Metadata File at App4Legal).

Obtain Client ID & Client Secret

1. From App registrations in Azure AD, select your application.

2. Select Overview.
3. Copy Application (client) ID (to be pasted as Client ID at App4Legal).

4. Select Certificates & secrets.

5. Select Client secrets → New client secret.

6. Provide a description of the secret, and a duration. When done, select Add.

7. After saving the client secret, the value of the client secret is displayed. Copy this value because you won't be able to retrieve the key later (to be pasted as Client Secret at App4Legal).

Client Secret

API Permissions

1. Select API Permissions.

2. Select Add a permission → Microsoft Graph.

3. Add the Following Permission.
   
4. Don't forget to grant admin consent for these permissions.

Configure App4Legal as SAML Service Provider

Enable SSO in App4Legal

1. Sign in to your App4Legal instance App4legal.

2. Go to the Settings → Single Sign On →Setup .

3. Select Azure Active Directory 
4. Paste Client ID & Client Secret (copied before from Azure AD).
5. Upload Metadata File (downloaded before from Azure AD).
6. Click Save

Import Users from Azure AD to App4Legal

1. Go to the Settings → Users & Permissions →Import Users from Azure Active Directory.
2. Look up the users and choose the appropriate User Group.