Integrating your Single Sign-On (SSO) Authentication with Azure

**Advanced configuration: please rope in all pertinent IT resources before proceeding.

• Shortcut to Creating the Test Application
• Shortcut to Creating the Production Application

SSO Integrations

A Single Sign-On Integration can be achieved through the use of the SAML 2 authentication protocol. The process is relatively simple to set up if your institution supports authentication via a SAML 2 Identity Provider (IDP) and you've identified your IT personnel that govern such resources. To start the process please contact your customer success representative or reach out to support@suitable.co.

Creating the Test Application

1. Start in the Microsoft Entra Admin Center. Read more about Entra here.
2. Browse to Identity > Applications > Enterprise applications > All applications.
3. Create a new application, Suitable SSO Test.
4. Head to the Manage section on the left menu, and select Single sign-on.
5. Select SAML to open the SSO configuration page. 
6. Under Basic SAML Configuration, edit the information. For the Identifier (Entity ID), input https://sandbox.suitable.co/saml
   • Under Reply URL (ACS URL), input https://sandbox.suitable.co/saml/SSO
   • Under Sign on URL, input https://sandbox.suitable.co, then choose Save.
7. Under the Attributes & Claims section, edit the Unique ID to match the UPN. This value needs to match an email address format (example@test.edu). Choose Save.
8. After saving, locate the App Federation Metadata URL and share this with the Suitable team. Suitable will then configure this metadata to the Sandbox environment.
9. Finally, confirm to the Suitable team what the expected domains should be.

After completing this process for the Test site and confirming a successful test, repeat these steps for the Production environment.

Creating the Production Application

1. Create a new application, Suitable SSO Production.
2. Head to the Manage section on the left menu, and select Single sign-on.
3. Select SAML to open the SSO configuration page. 
4. Under Basic SAML Configuration, edit the information. For the Identifier (Entity ID), input https://app.suitable.co/saml
   • Under Reply URL (ACS URL), input https://app.suitable.co/saml/SSO
   • Under Sign on URL, input https://app.suitable.co, then choose Save.
5. Under the Attributes & Claims section, edit the Unique ID to match the UPN. This value needs to match an email address format (example@test.edu). Choose Save.
6. After saving, locate the App Federation Metadata URL and share this with the Suitable team. Suitable will then configure this metadata to the Production environment.