Configuring Microsoft Entra ID SSO for Veriato

Article No: 30237585708439

This article provides step-by-step instructions for configuring Single Sign-On (SSO) with SAML using Microsoft Entra ID for Veriato.

Enterprise Application Setup in Microsoft Entra ID

Step 1: Access Microsoft Entra Admin Center

1. Open the Microsoft Entra Admin Center.
2. Authenticate using an Azure Administrator account (Admin privileges required).

Step 2: Register a New Enterprise Application

1. Navigate to Identity > Applications > Enterprise Applications.
2. Click "New Application".
3. Select "Create your own application".
4. Enter a unique application name.
5. Ensure "Integrate any other application you don’t find in the gallery (Non-gallery)" is selected.
6. Click "Create".
   

   Upon creation, you will be redirected to the Application Overview Page.

Configuring SAML-Based Single Sign-On

Step 1: Initiate SAML Configuration

1. In the Enterprise Application Overview Page, click "2. Set up Single Sign-On".
2. Select SAML as the SSO method.
   

Step 2: Configure Basic SAML Settings

1. Open a new tab and log in to the Veriato Portal.
2. Navigate to Admin > Login & Access Control > SSO/SAML Configuration.
3. Click Service Provider Information.

Step 3: Map SAML Configuration Values

1. Copy Audience (Entity ID) from Veriato and paste it into Identifier (Entity ID) in Entra ID.
2. Copy ACS (Consumer) URL Validator from Veriato and paste it into Reply URL (Assertion Consumer Service URL) in Entra ID.
3. Click Save to apply changes.
   

Configuring Identity Provider (IdP) in Veriato

Step 1: Input Identity Provider Details

1. Switch to Microsoft Entra Admin Center.
2. Copy the following values from Entra ID and paste them into Veriato:
   • Issuer URL → Microsoft Entra Identifier
   • SAML 2.0 Endpoint (HTTP) → Login URL
   • X.509 Certificate → Download the Certificate (Base64), open in Notepad, copy the contents, and paste into X.509 Certificate.
3. Click Save to finalize the integration.
4. Once you are done, enable the switch.

Assigning Users and Groups for Access Control

Step 1: Assign Users in Entra ID

1. Navigate to Users & Groups in Microsoft Entra ID.
2. Click "Add User/Group".
3. Select the Users or Groups that require access.
4. Click "Select", then "Assign" to apply permissions.
   
   
   
   
   
   

   
   Verifying SSO Configuration and Authentication

   Step 1: Initiate SSO Testing in Entra ID

   1. In Microsoft Entra Admin Center, open the configured Enterprise Application.
   2. Click "Single Sign-On".

   Step 2: Validate SSO Integration

   1. Scroll down and click "Test".
   2. Navigate to Test Single Sign-On with [Application Name] page.
   3. Click "Test Sign In".
   4. If successful, you will be redirected to Veriato UI, confirming successful SSO authentication.
   

Note: After enabling SSO, a user cannot log into the Veriato portal using the User Name and Password.

How to Disable SSO (Single Sign-On)