Single Sign-On with Microsoft Azure AD

Overview

This step-by-step guide explains how to set up Single Sign-On in Record Migrator with Microsoft Azure Active Directory (AD) as your SAML 2.0 Identity Provider (IdP).

When you integrate Record Migrator with Azure AD, you can:

1. Control in Azure AD who has access to Record Migrator
2. Enable users to be automatically signed in to Record Migrator with their Azure AD accounts
3. Manage your accounts in one central location— the Azure portal.

Prerequisites

To get started, you need the following items:

1. Microsoft Azure account with Azure AD Premium activated.
2. Administrator-level access to Record Migrator and Azure AD to configure SSO.
3. Add Record Migrator as a non-gallery application in Azure.

Instructions

Step 1: Configuring in Azure AD

1. Log into the Azure portal (https://portal.azure.com/). In the left-hand menu, click Azure Active Directory > Enterprise applications.
   

2. Select All applications under the Manage section.

3. Click + New application at the top of the screen.
   

4. On the next screen, click on the + Create your own application button.
   

5. Enter the name of the app as Record Migrator and choose the third option, Integrate any other application you don't find in the gallery (Non-gallery). Click on Create.

6. After the Record Migrator application is created, click on Single Sign-On under the Manage section.

7. On the Select a Single sign-on method dialog, select SAML mode to enable Single Sign-On.
   

8. On the Set up Single Sign-On with SAML page, click the Edit (pencil) icon for Basic SAML Configuration to change the settings.
   

9. On the Basic SAML Configuration section, perform the following steps:

   1. In the Identifier (Entity ID) field, enter the URL as autorabit.com.

   2. In the Reply URL field, enter the URL in the below format: <instanceurl>/api/v1/saml/SSO
      
      For example: If your instance URL is https://rbm.autorabit.com, your Reply URL will be https://rbm.autorabit.com/api/v1/saml/SSO

   3. In the Sign on URL field, type the secure URL of your domain (i.e., starting with https://). For example: https://rbm.autorabit.com/.

   4. Click Save and close the dialog box.

10. Click on Single Sign-On to navigate to the Set up Single Sign-On with SAML page.

11. In the SAML Certificate section, find Federation Metadata XML and select Download to save the certificate on your computer.

Step 2: Configuring in Record Migrator SAML Connection

Now that Azure SSO implementation is set up, follow these steps to configure SSO in your Record Migrator account.

1. Log into your Record Migrator account.

2. Click on the Settings icon at the top-right corner of the page.
   

3. Go to User Management > SSO > OKTA.

4. Browse for the Metadata XML file you downloaded in your local machine and upload it.
   

Step 3: Testing the Single Sign-On Configuration

1. Log out of the Record Migrator app, and then log back in using the Single Sign On option.
   

2. Enter your organization name in the text field available.
   

3. Click Continue.

4. You should successfully redirect to the Record Migrator app after authentication.