How do I set up Single Sign-On (SSO) for Humanforce Web with Azure AD?

If your organisation uses Microsoft Azure Active Directory / Microsoft Entra ID to authenticate users, this can be incorporated into Humanforce Web. Follow the instructions below on how to configure Azure AD.

1. Go to the Azure Portal - http://portal.azure.com/ and sign in using your credentials.
2. Search for Azure Active Directory and select from the search results
   
3. Select New application
   
   
4. Select Create your own application
   
5. Enter a name for your Application and select Integrate any other application you don't find in the gallery (Non-gallery). Click Create.
   
   
6. Select Single sign-on
   
   
7. Select SAML
   
   
8. Select Edit
   
   
9. Navigate to your instance of Humanforce Web and login as an administrator and navigate to Admin > Security Config > SAML/SSO Admin
   
   
10. Take note of the Service Provider Name and the Assertion Consumer Service Url
    
    
11. Navigate back on the Azure Portal, enter the following information for the; Identifier and Reply URL. Click Save. 
    

    Identifier (Entity ID)	This will be the Service Provider Name from the previous step.
    Reply URL (Assertion Consumer Service URL)	This will be the Assertion Consumer Service Url from the previous step.

    

12. Scroll down and take note of the Login URL, Azure AD Identifier and Logout URL. 
    
13. Back in Humanforce Web, Navigate to the Web - Identity Provider tab and enter in the information as per below and then click Save Changes
    
    

    Identity Provider Name	This will be the Azure AD identifier from the previous step
    Single Sign-on Url	This will be the Login URL from the previous step
    Single Logout Url	This will be the Logout URL from the previous step

    
    
14. Navigate to the Settings tab and set the value for SSO Mode to Dual Mode. Click Save Changs.
    
    
15. Navigate back to the Azure Portal, Click Users and groups, then click Add user/group.
    
    
16. Click None Selected
    
    
17. Locate and select the user(s) or Groups you want to give access and click Select.
    
18. Click Assign
    
19. Now when loading the Humanforce Web login page there is an option to select Continue with SSO. Click this to login using your organisations SSO provider.