Introduction
Microsoft Entra ID (formerly Azure AD) is an identity provider that provides Single Sign-on (SSO) functionality. If your company has added SSO to their ModernLoop plan, you can manage login access to ModernLoop and maintain consistent security across your organization through your Microsoft Entra ID system.
This help center article outlines the steps to enable have ModernLoop defer Sign-on capabilities to your Microsoft Entra ID system.
For steps to set up SCIM for Microsoft Entra ID see: Azure User Provisioning (SCIM)
In this article
Pricing
Single sign-on, including Azure is an optional, paid add-on service.
If you are not currently using Azure with ModernLoop but want to explore it further, contact your Account Executive or Customer Success Manager for additional information.
Enabling SAML
- Navigate to http://portal.azure.com and log in as an administrator
- Search for Enterprise applications in the global search bar
- If not already created - click Create your own application
a.) Provide a name for the application, such as modernloop-saml
b.) Choose Integrate any other application you don’t find in the gallery (Non-gallery)
c.) Navigate to the application and select Single Sign on, then choose SAML as the sign-in method
d.) Add the “Identifier” and “Reply URL” provided by your ModernLoop CSM under Single sign-on → Basic SAML Configuration. They will be in the following format:
Unfilled example
1. Identifier - urn:auth0:modernloop:{{CONNECTION_NAME}}
2. Reply URL - https://auth.modernloop.io/login/callback?connection={{CONNECTION_NAME}}
Filled example
1. Identifier - urn:auth0:modernloop:acme-company
2. Reply URL - https://auth.modernloop.io/login/callback?connection=acme-company - Assign users who will be using ModernLoop
NOTE: ModernLoop does not support Group assignment - Provide your ModernLoop CSM with your App Federation Metadata URL
- Your ModernLoop CSM will then activate SSO for your instance and follow up with you to confirm when it's active.