Skip to main content

Configure SSO with Azure

S
Written by Seweryn Jagusiak
Updated over a year ago

With SSO (Single Sign-On), users in your organization can easily authenticate using accounts they already have within Azure.

Prerequisites

To have SSO enabled for your organization a team or an enterprise plan is required (see pricing). Once in place, you can access your team account via Billing Team tab (available in Settings, alternatively using this link: https://sellercrowd.com/settings/billing-team/) where you can get following details:

  • Entity ID

  • Organisation ID

  • Assertion Consumer Service (ACS) URL

You also need to create/have Enterprise Managed application created in your in Azure Console .

Supported features

  • IdP-initiated SSO

  • SP-initiated SSO

  • Just-In-Time provisioning

Configuration steps

  1. Log in to yours Azure Application view page and select "Single sign-on".
    ​

  2. Select a single sign-on method:
    Select SAML method (click tile).
    ​

  3. Set up Single Sign-On with SAML:
    Fill following form with data:
    ​
    a) Basic SAML Confiuration (click Edit button)
    ​
    ​Entity ID: Entity Id value, available at Sellercrowd's Billing Team page (see Prerequisites),

    ACS URL: Assertion Consumer Service (ACS) URL value, available at Sellercrowd's Billing Team page (see Prerequisites),

    Sign on URL: https://sellercrowd.com/login/sso/
    ​
    ​


    ​
    Confirm by clicking Save.
    ​
    b) Attributes & Claims (click Edit button)


    ​Required claim: user.mail


    ​Additional claims: givenname, surname


    ​Important: use same schemas as presented on picture.


    Go back to intial form by clicking:

    in breadcrumbs.
    ​
    c) SAML Certificates (click Edit button)
    ​
    Leave default options for signing:


    then set notification email:
    ​Notification email: techsupport@sellercrowd.com


    d) Download XML file
    ​
    Click on Download button next to Federation Metadata XML
    ​

  4. Open Billing Team page in Sellercrowd (see Prerequisites) and click I have the XML.

  5. Copy content of file (open in editor and copy all text inside) obtained in step 3.d and paste to form:
    ​

  6. Click Enable SSO. You can start assigning people to the application on the Azure side (to allow all or some of your users to actually have access to SellerCrowd).

SP-initiated SSO

  1. Go to https://sellercrowd.com/login/sso/

  2. Enter your email, then click Continue.
    ​

Did this answer your question?