Add Empuls as SAML app in Azure
1. In the Azure portal, on the left navigation panel, select Azure Active Directory --> Enterprise Applications.
2. In the Enterprise applications pane, select +New application.
3. Switch to the legacy app gallery experience in Azure AD Gallery.
4. Click on the third card: Non-gallery application.
5. Add app name (For eg. Xoxoday Empuls) and Click the Add button on the bottom left corner.
6. Click on Users and groups and map the users to whom you want to give Empuls login access. You can simply give access to all users by setting the User Assignment Property to No as shown:
7. After that, go to Overview and select Set up single sign on --> SAML.
8. Click the Edit (Pencil Icon) button on the Basic SAML Configuration Card.
9. Now move on to Empuls User Authentication Admin setting and select Custom Login
Please copy the following details from your Empuls account fill in the SAML configuration section: (You can even upload the service provider metadata .xml file to Azure)
Identifier (Entity ID): https://xxxxxx.xoxoday.zzz/chef/sso/metadata-sp/xxxxxx
Reply URL (Assertion Consumer URL) - https://xxxxxx.xooxday.zzz/chef/sso/validate-saml/xxxxx
Relay State - https://xxxxxx.xoxoday.zzz/login
Logout URL - https://xxxxx.xoxoday.zzz/chef/sso/idp/logout/post/xxxxx
10. After this click on the Save button on the top left of the Basic SAML configuration pop up window.
11. On the Third card SAML signing certificate, click on the Download button beside Federation Metadata XML.
12. The downloaded metadata must be uploaded on your Empuls platform on /home/integrations/saml_sso as shown below.
13. Finally, go to Test Connection to ensure single sign on is enabled and working.