How do I set up Single Sign-On (SSO) for Humanforce Mobile App with Azure AD?

If your organisation uses Microsoft Azure Active Directory / Microsoft Entra ID to authenticate users, this can be incorporated into the Humanforce Work Mobile App. Follow the instructions below on how to configure Azure AD.

1. Go to the Azure Portal - http://portal.azure.com/ and sign in using your credentials.
2. Search for Azure Active Directory and select from the search results
   
3. Take note of your Primary domain. You will need to provide this information to Humanforce Support. Select Enterprise applications
   
4. Select New application
   
   
5. Select Create your own application
   
6. Enter a name for your Application e.g. HF Work Mobile App and select Integrate any other application you don't find in the gallery (Non-gallery). Click Create.
   
   
7. Select Single sign-on
   
   
8. Select SAML
   
9. Select Edit
   
   
10. Enter the following information for the; Identifier,Reply URL and Sign on URL . Click Save. 
    

    Identifier (Entity ID)	urn:amazon:cognito:sp:ap-southeast-2_W7tgpw6cA
    Reply URL (Assertion Consumer Service URL)	https://auth.humanforce.com/saml2/idpresponse
    Sign on URL (Optional)	https://auth.humanforce.com/oauth2/idpresponse

    

11. Download the Federation Metadata XML file
    
12. Click Users and groups, then click Add user/group.
    
    
13. Click None Selected
    
    
14. Locate and select the user(s) or Groups you want to give access and click Select.
    
15. Click Assign
    
16. Provide the following information to the support team:
    
    
    • Your Humanforce Web URL
    • Your Primary Domain as per step 3
    • Your Federation Metadata XML file as per step 11