SSO via Azure Active Directory

This page describes how to set up Single Sign-on via Azure Active Directory.

If you are an Enterprise Customer, please contact [e-mail] for SDA to prepare the Azure AD integration.

SDA parameters you will need to set up SSO via Azure AD on your end are the following:

• Entity ID: urn:amazon:cognito:sp:eu-west-1_2ZSzPyYus

• Reply URL: https://auth.softwaredefinedautomation.io/saml2/idpresponse

• Sign on URL: https://console.softwaredefinedautomation.io

• Relay State: https://console.softwaredefinedautomation.io

• Logout URL: https://console.softwaredefinedautomation.io

SDA will need the following SAML attributes:

SDA Attribute	SAML Attribute
User Groups	http://schemas.microsoft.com/ws/2008/06/identity/claims/groups
Email	http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress
Surname	http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname
First Name	http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname

These attributes should be shared with your SDA contact via an XML "Metadata" document using UTF-8 character set.

Note on User Groups: There are 2 groups in SDA - Administrators (sda-administrators) and Users (sda-users). If a person is part of the admin group, the person will be an Administrator in SDA, otherwise a User.