Integration via SSO with Azure AD or Entra ID using SAML

🎯 Objective

Learn how to configure SSO integration via SAML between netLex and Microsoft Azure AD. This integration allows your users to access netLex using Microsoft credentials, ensuring security, convenience, and centralized access management. 🚀

This article contains the sections:

• What is the functionality?
• How to configure SSO with Azure AD
• Testing the SSO
• Guided Tour

• Frequently Asked Questions

💡 What is the functionality?

With the SSO integration via SAML between netLex and Azure AD, your users can access netLex using the same corporate credentials they already use for other Microsoft services.

This improves the login experience and increases your organization's security through centralized authentication and full access control by the Azure administrator. 🔐

🛠️ How to configure SSO with Azure AD

Follow the step-by-step instructions below to perform the configuration:

1. In netLex, go to Settings Single Sign-On.
   Note: you must have an admin profile in netLex to perform this configuration.

2. Enable the SAML option.

   
   

3. Click on "Get SAML Metadata" or copy the link below (replacing <netlex-company-domain> with your company's domain in netLex) and access it to download the netLex metadata:

   https://<netlex-company-domain>/api/auth/saml-sp-metadata

4. Save the file as .xml on your machine by right-clicking "Save as".
5. Now, access Azure/Microsoft Entra with an administrator profile.

6. Go to Azure Active Directory Applications Enterprise Applications.

   
   

7. Create a new custom application by clicking + New Application Create your own application.

8. Name the application and select Integrate any other application you don't find in the gallery (Non-gallery).

   
   

9. Click "Create".

10. After creation, go to the Set up single sign-on section.

    
    

11. Choose the SAML method and select Upload metadata file.
12. Import the netLex metadata file you downloaded earlier.

13. Click "Add" and then "Save".

    
    

14. Under the "SAML Certificates" information, copy the App Federation Metadata URL link.

    
    

15. Paste the App Federation Metadata URL link into another tab in your browser.

16. Copy the link inside "Entity ID" in the metadata and paste it into "Entity ID" in netLex.

    
    
    

17. Copy the link inside "Location" in the metadata and paste it into "Single Sign-On Service URL" in netLex.

18. Copy the certificate inside "Certificate" between <> in the metadata and paste it into "Entity Certificate" in netLex.

    
    

19. Press "ctrl + f" to search for "/displayname", copy the link, and paste it into "Name Attribute" in netLex.

    
    
    

20. Press "ctrl + f" to search for "/email", copy the link, and paste it into "Login Attribute" in netLex.
21. Save the settings in netLex.

💡 Tip: If you use netLex in separate environments (Sandbox and Production), we recommend creating distinct applications in Azure AD with names that identify each environment.

✅ Testing the SSO

With the settings saved in netLex and the application configured in Azure AD:

• Open an incognito window and go to your netLex URL.
• You will be redirected to the Microsoft login screen.
• Log in using your company credentials.

If everything is correct, you will be successfully authenticated! 🎉

🎥 Guided Tour

❓ Frequently Asked Questions

• Is it mandatory to restrict access by group?
  No. You can grant access to all users or limit it to a specific group, according to company policy.
• When configuring SSO in the sandbox environment, does it also apply to production?
  No. The process is the same, but it must be done separately. One app for the sandbox environment and another for production.
• The "Login with Microsoft" button doesn't appear. What now?
  Check if SSO is enabled in netLex, if the attributes are correct, and if the app is assigned to your user group in Azure.