Skip to main content

Azure AD SSO (SAML)

How to integrate Azure Active Directory SSO with Endorsed

Written by David Head

Endorsed supports login via SSO if your organizations requires it. Below is the end to end steps for getting set up

  1. Endorsed will provide the following connection details

    1. Federation Metadata URL (e.g. https://endorsed-production.us.auth0.com/samlp/metadata?connection=<connection-name)>

    2. Service Provider Entity ID (e.g. urn:auth0:endorsed-production:<connection-name>)

    3. Service Provider ACS (e.g. https://endorsed-production.us.auth0.com/login/callback?connection=<connection-name)>

    4. Organization Name for SSO Login (most likely your organization's name in lowercase)

  2. Register Endorsed application with Azure Active Directory

    1. Sign in to the Azure portal.

    2. Search for Azure Active Directory, and then select it.

    3. Under Manage, select App registrations.

    4. Select New registration.

    5. Enter a name (e.g. Endorsed)

    6. Select one of the Supported account types that best matches your organization's requirements.

    7. Under Redirect URI, select Web as the platform. Enter the reply URL of https://endorsed-production.us.auth0.com/login/callback

    8. Enter the Federation Metadata URL provided from step 1)

    9. Select Register.

  3. Provide the following details to the Endorsed team:

    1. The entityID tag (from the registration step)

    2. Signing Certificate File

    3. Signin URL (looks like https://login.microsoftonline.com/556ec681-ffae-4aa4-9b92-2b0d5e194c6b/saml2)

    4. Endorsed will then take this information and finalize the configuration within Endorsed

  4. Initial Test


    After the application has been created in Azure AD and Endorsed has finished configuring SSO on the Endorsed side proceed with the following:

    1. Assign the application to a user for testing purposes in Azure

    2. Login to https://endorsed.com/sign-in

    3. Enter the connection name (Endorsed will provide this)

    4. Complete the Login via Azure AD

    5. If you see the /jobs Endorsed page, then the SSO is working end to end (see screenshot)
      ​
      Please note: You may not see jobs on the jobs page if the Endorsed sync has not completed yet.

  5. Prepare the application in Azure Active AD for recruiter / team usage

    1. Add in the required users / groups to the application for access

    2. Have at least one member of your organization with permissions login via the instructions above and verify that they reach the /jobs page in Endorsed

Did this answer your question?