Comment on page
Azure SSO Integration via SAML
FileHub supports SSO integration via any provider that supports SAML. In this article we will specifically cover how to set up SSO via Azure.
To configure SSO, you need:
- One of the following roles: Global Administrator, Cloud Application Administrator, Application Administrator, or owner of the service principal.
- 1.Go to your Azure portal.
- 2.On the left, select “Azure Active Directory.”
- 3.Select “Enterprise Applications.”
- 4.Click on “+ New Application.”
- 5.Search for “SmartFile” in the “Add from the gallery” search box. Select the service in the dropdown menu.
- 6.Click add.
- 7.Navigate to the “Enterprise applications” tab and select “SmartFile.”
- 8.In the “Users and groups” section, select “+Add user.”
- 9.Select the “Users and groups” section and select users that you would like to be able to sign in with Azure SSO. Click the “Select” button at the bottom to confirm.
- 10.Click “Assign” when finished.
- 11.In the “Single sign-on” section, select “SAML.”
- 12.Fill out the following fields:
- 1.Identifier (Entity ID): This will be your custom domain. DO NOT INCLUDE https://
- 2.Reply URL (Assertion Consumer Service URL): Your entity id + ‘/saml2/acs/’ .
- 3.Click “Show advanced URL settings”. Sign on URL: Your entity id + ‘/ftp/login/’ .
- 13.If the “Status” of the certificate in this section is not active, be sure to activate it with the “Make new certificate active” check box.
- 14.Save the form.
- 15.In step 4 (SAML Signing Certificate), copy the “App Federation Metadata Url.” Go to that Url, then save that file as “sitename_saml_azure.xml.”
- 1.Sign into your SmartFile account.
- 2.For each user assigned to Azure sign in, create a user with their username and email being the email used in Azure and the sign on method set to “SSO”.
- 3.Send “sitename_saml_azure.xml” in a support ticket to [email protected]
- 4.SmartFile will add this file to your account.
- 5.When you go to your site’s sign in page, there should now be a “Single Sign-On” button. Users will click on this button and be signed into SmartFile through Azure to their given account.
- 6.If a user gets a page saying that the account does not exist, ensure that the user’s email is set as the SmartFile user’s username and email.
Last modified 1mo ago