How to configure SSO in Azure AD ?

Configuring SAML in Azure AD

1. In your Azure Active Directory (AD), click on Enterprise Applications in the left sidebar.
   
   
2. Click on New application at the top.
   
   
3. Click on Create your own application at the top.
   
4. Give the app a name (eg. Estateably) and make sure Integrate any other application you don’t find in the gallery (Non-gallery) is selected. Click on Create at the bottom.
5. In the left sidebar, click on Single sign-on, then click on SAML
6. Click the Edit button of the Basic SAML Configuration section. In the drawer that opens...
1. Replace the current value in the Identifier (Entity ID) input field with `https://app.estateably.com` and select the Default checkbox.
2. Paste `https://xxxx.app.estateably.com/api/v1/auth/saml/login` where `xxxx` is your company domain in the Reply URL (Assertion Consumer Service URL) input field and select the Default checkbox.
3. Paste the same `https://xxxx.app.estateably.com/api/v1/auth/saml/login` in the Sign on URL input field.
4. Click on Save at the top of the drawer, then close the drawer.
   
   
7. In the SAML Signing Certificate section, download the Certificate (Base64) file, and open that file with a text editor. You’ll need its contents in the next step. Also keep your Azure AD page open for the next step.
8. In the Estateably application, go to your organization’s Settings page, then click on Single sign-on in the left sidebar. Fill the form…
1. Select the Set up SSO with a Third-party Identity Provider
2. In the Identity Provider Name select box, choose Azure AD
3. In the Identity Provider Single Sign-On URL (SAML 2.0 Endpoint) input field enter the URL found in the Azure AD page in the Login URL box of the Set up Estateably section.
4. In the Identity Provider Issuer (Entity ID) input field enter the URL found in the Azure AD page in the Azure AD Identifier box of the Set up Estateably section.
5. In the Identity Provider Certificate, paste the text value of the certificate you downloaded and opened in Step 8.
6. Click on Save Changes at the top of the Estateably Settings page.
9. Add any users and groups to this app in Azure AD as normal.

Configuring SCIM in Azure AD

1. In your Azure Active Directory (AD), if you’ve already created an app for Estateably, click on Provisioning in the left sidebar. If you haven’t created an app, follow steps 1-4 in the Configuring SAML in Azure AD section.
2. Click on the Get Started button. In the new window, change the Provisioning Mode to Automatic.
3. In the Tenant URL input field, paste `https://xxxx.app.estateably.com/api/v1/scim?aadOptscim062020` where `xxxx` is your company domain (the parameter aadOptscim062020 is to ensure compliance with the SCIM protocol).
4. Keep your Azure AD page open and go to the Estateably application in your organization’s Settings page. At the bottom, in the SCIM Configuration section, click on the generate button of the API Key field. Copy the key.
5. Back in Azure AD, paste the key copied in Step 4 in the Secret Token input field.
6. Click on Test Connection to make sure you don’t get an error message.
7. Click on Save at the top of the page.