Skip to main content

SSO Microsoft (SAML)

Read how to implement SSO via Microsoft into your online academy

Floor Takman avatar
Written by Floor Takman
Updated over 3 weeks ago

What is SSO?

With Single Sign-On (SSO), your users can log in to the online academy using an external account. Read more about SSO in general here.

In this article, we explain what needs to be configured to activate this integration with Microsoft.

To use SSO, users must already be added to the online academy. SSO does not create user accounts.

Read more here about adding users to your online academy.

How do I configure SSO?

We will provide instructions on how to set up SSO. Please consult Microsoft’s support for the precise settings.

Step-by-step guide for creating credentials in Microsoft

To set up SSO via Microsoft, you can follow the steps below. This support article from Microsoft can also assist you.

  1. In the Basic SAML Configuration, fill in the Identifier (Entity ID) and Reply URL (Assertion Consumer Service URL).

    1. You can access this by clicking 'Edit' under Basic SAML Configuration in the Set up Single Sign-On with SAML section.

    2. Next, proceed to enter the following information:

      Identifier:

      urn:co:hubper:saml2-adapter

      urn:com:rakoo:saml2-adapter > make sure to check the box for default here.

      Reply URL:

      https://saml2.rakoo.com/saml/SSO > make sure to check the box for default here

      https://saml2.hubper.co/saml/SSO

  2. Correctly set the attributes:

    1. User.mail = user.userprinciplename

    2. Unique User Identifier = user.userprinciplename

  3. Next, you need the credentials from Microsoft to set up the integration in your online academy.

    1. App Federation Metadata URL

      It may look like this (example):

      https://login.microsoftonline.com/e2126f63-8dda-44b5-9b94-77742ad125fe/federationmetadata/2007-06/federationmetadata.xml?appid=fac70d5b-b5f6-4de7-9210-42c981a9da7a

      This URL may vary for your situation. It's important to include the following part in the URL: appid=fac70d5b-b5f6-4de7-9210-42c981a9da7a

    2. Microsoft Entra ID Identifier (EntityID)

      It may look like this: https://sts.windows.net/e2126f63-8dda-44b5-9b94-77742ad125fe/

    3. Optional: Certificate (Base64)

      It is possible to upload a certificate for the SSO integration in Rakoo. You can download this certificate from the same location as the information above. If you wish to do so, you can also send it to us.

Step-by-step guide for creating the integration in the online academy

  1. Go to “Integrations” via the menu on the left.

  2. Under “Single Sign-On,” choose “Microsoft (SAML).”

  3. Click “Add.”

  4. Enter the information obtained from GitHub.

  5. If desired, enable the toggles under “Integration status”:

    • Use “Activated” to specify whether the integration is active.

    • With “Login with button,” you can choose whether a button should be displayed on the login screen. If this option is disabled, users can only log in via an external SSO method (e.g. intranet).

  6. Save the changes to activate the integration.

Are you having trouble with the setup? Please contact support.

Did this answer your question?