How to Configure Single Sign-on (SSO) with Microsoft Entra ID (formerly Azure AD)

Overview

This page describes the steps to configure Single Sign-on (SSO) login to Josys using Microsoft Entra ID (formerly Azure AD).

Configure Integration

Create an Enterprise Application

1. Log in to Microsoft Entra ID.
2. Click Enterprise applications.
3. Click "+ New application".
4. Enter any name for the application (e.g., josys-sso).
5. Select "Integrate any other application you don't find in the gallery (Non-gallery)".
   
6. You will be redirected to the page of the created application.

Configure SAML Settings

1. From the Single sign-on menu of the created application, select SAML.
   
2. Click "Edit" in the Basic SAML Configuration section.
   
3. Open Josys and click Settings > Single Sign-on.
4. Click the "Configure SSO" button.
5. Since "Okta" is selected by default in Josys, select "Others (SAML 2.0 IdPs only)".
   
6. Copy the ACS URL and Entity ID, and paste them into Microsoft Entra ID.
   Identifier (Entity ID): Entity ID
   Reply URL (Assertion Consumer Service URL): ACS URL
7. Click the "Save" button in the upper-left corner of the right pane in Microsoft Entra ID.
8. Once saved, scroll down to step 4, "Set up ".
9. Copy the Login URL and Microsoft Entra Identifier, and paste them into Josys.
   
   
10. Scroll back up to step 3, "SAML Certificates", and click "Download" next to Certificate (Base64).
    
11. Once the file with the ".cer" extension is downloaded, right-click the file and open it with Notepad.
12. Copy the entire content, including the BEGIN CERTIFICATE and END CERTIFICATE lines.
    
13. Return to Josys and paste it into the Certificate field.
14. Once entered, click "Save" in the bottom right of the Josys pop-up.

Assign Users and Groups

1. If you want to explicitly specify which users are assigned to Single Sign-on, click "Users and groups".
2. Click Properties, and set "Assignment required?" to "Yes".
   
3. Click Users and groups.
4. Click Add user/group.
5. Select the users.
6. Click "Assign".

Test the Integration

Microsoft Entra

1. Click "Single sign-on".
2. Click "Test this application".
3. When the window opens on the right, click "Test sign-in".

Josys Admin Console

1. Open Josys and click Settings > Single Sign-on.
2. Click "Test Authentication".
3. The setup is complete once the SAML authentication test result is displayed.

Josys Employee Portal

1. Click Settings > Employee Portal in the left sidebar of the Josys admin screen.
2. Click the Single Sign-on tab.
3. Click the three-dot icon (...) and click "Test Authentication".
   
4. The setup is complete once the test result is displayed.