With SSO (Single Sign-On), users in your organization can easily authenticate using accounts they already have within Azure.
Prerequisites
To have SSO enabled for your organization a team or an enterprise plan is required (see pricing). Once in place, you can access your team account via Billing Team tab (available in Settings, alternatively using this link: https://sellercrowd.com/settings/billing-team/) where you can get following details:
Entity ID
Organisation ID
Assertion Consumer Service (ACS) URL
You also need to create/have Enterprise Managed application created in your in Azure Console .
Supported features
IdP-initiated SSO
SP-initiated SSO
Just-In-Time provisioning
Configuration steps
Log in to yours Azure Application view page and select "Single sign-on".
Select a single sign-on method:
Select SAML method (click tile).
Set up Single Sign-On with SAML:
Fill following form with data:
a) Basic SAML Confiuration (click Edit button)
Entity ID: Entity Id value, available at Sellercrowd's Billing Team page (see Prerequisites),ACS URL: Assertion Consumer Service (ACS) URL value, available at Sellercrowd's Billing Team page (see Prerequisites),
Sign on URL: https://sellercrowd.com/login/sso/
Confirm by clicking Save.
b) Attributes & Claims (click Edit button)
Required claim: user.mail
Additional claims: givenname, surname
Important: use same schemas as presented on picture.
Go back to intial form by clicking:
in breadcrumbs.
c) SAML Certificates (click Edit button)
Leave default options for signing:
then set notification email:
Notification email: techsupport@sellercrowd.com
d) Download XML file
Click on Download button next to Federation Metadata XML
Open Billing Team page in Sellercrowd (see Prerequisites) and click I have the XML.
Copy content of file (open in editor and copy all text inside) obtained in step 3.d and paste to form:
Click Enable SSO. You can start assigning people to the application on the Azure side (to allow all or some of your users to actually have access to SellerCrowd).
SP-initiated SSO
Enter your email, then click Continue.