Skip to main content

SSO Microsoft (SAML)

Read how to implement SSO via Microsoft into your online academy

Floor Takman avatar
Written by Floor Takman
Updated over 3 weeks ago

What is SSO?

With Single Sign-On (SSO), your users can log in to the online academy using an external account.

In this article, we explain what needs to be configured to activate this integration with Microsoft.

To use SSO, users must already be added to the online academy. SSO does not create user accounts.

Read more here about adding users to your online academy.

How do I configure SSO?

We will provide instructions on how to set up SSO. Please consult Microsoft’s support for the precise settings.

Step-by-step guide for creating credentials in Microsoft

To set up SSO via Microsoft, you can follow the steps below. This support article from Microsoft can also assist you.

  1. In the Basic SAML Configuration, fill in the Identifier (Entity ID) and Reply URL (Assertion Consumer Service URL).

    1. You can access this by clicking 'Edit' under Basic SAML Configuration in the Set up Single Sign-On with SAML section.

  2. Next, proceed to enter the following information:

    Identifier:

    urn:com:rakoo:saml2-adapter

    Reply URL:

    You can find this in the integration section in Rakoo, under 'Data for the other party.' You will see this section as soon as you've saved the integration.

  3. Correctly set the attributes. This is dependent on how the information is saved in Rakoo: the value that is given through in Azure has to comply with how it's set up in Rakoo.

    Unique User Identifier = user.userprinciplename or user.mail

  4. Next, you need the credentials from Microsoft to set up the integration in your online academy.

    1. App Federation Metadata URL

      It may look like this (example):

      https://login.microsoftonline.com/e2126f63-8dda-44b5-9b94-77742ad125fe/federationmetadata/2007-06/federationmetadata.xml?appid=fac70d5b-b5f6-4de7-9210-42c981a9da7a

      This URL may vary for your situation. It's important to include the following part in the URL: appid=fac70d5b-b5f6-4de7-9210-42c981a9da7a

    2. Microsoft Entra ID Identifier (EntityID)

      It may look like this: https://sts.windows.net/e2126f63-8dda-44b5-9b94-77742ad125fe/

Step-by-step guide for creating the integration in the online academy

  1. Go to “Integrations” via the menu on the left.

  2. Under “Single Sign-On,” choose “Microsoft (SAML).”

  3. Click “Add.”

  4. Enter the information obtained from Microsoft.

  5. If desired, enable the toggles under “Integration status”:

    • Use “Activated” to specify whether the integration is active.

    • With “Login with button,” you can choose whether a button should be displayed on the login screen. If this option is disabled, users can only log in via an external SSO method (e.g. intranet).

  6. By default, the 'Log in with Microsoft' button will be shown on the login page.
    Through 'Icon on login', both the text and the associated icon can be customized.

  7. Save the changes to activate the integration.

Are you having trouble with the setup? Please contact support.

Did this answer your question?