How to configure Single Sign-on through EntraID

This article gives a full overview of steps on how to configure the Single Sign-On in Fluix through EntraID.

1. Go to Microsoft Entra Admin center
   
   
   
2. Open Identity → Applications → Enterprise applications → Overview and choose Add enterprise application.
   
   
3. Type “Microsoft Entra SAML Toolkit” in the Search application.
   
   
   
4. Click on the founded toolkit:
   
   
   
5. Type the name in the opened window and press Create.
   
   
   
6. After that, open your application page: (It may be opened automatically after pressing “Create” – this step can be skipped)
   Identity → Applications → Enterprise applications and selected created by you Application from the list.
   
   
   
7. Navigate to Single Sign On menu and select SAML.
   
   
   
8. It will lead you to Application SAML configuration page:
   
   
   
9. On this step, open in the separated tab Fluix Admin Portal -> Settings -> Security -> enable Enable Sign On using SAML and fill out Company Email Domain field:
   
   
   
   
10. After that, ACS URL will change and consist of the entered “Company Email Domain”.
    
11. Navigate back to your Microsoft account and click Edit on the first block step:
    
    
    
12. Copy from Fluix to Microsoft the following settings and click Save:
    
    Entity ID → Identifier (Entity ID)
    ACS URL → reply URL
    The link to the Sign-On form → Sign on URL
    
    
    
13. Navigate in Microsoft to the next block 2 and click Edit:
    
    
    
14. On the opened page:
    
    delete all additional claims
    
    
    
    change value of Unique User Identifier (Name ID) to the user.mail or any other source attribute which consists of user email (this email will be used to authenticate a user in Fluix) and press Save.
    
    
    
    
    
15. Return back to Microsoft SAML Configuration:
    
    
    
    
    copy Login Url from Microsoft to Fluix SSO Url
    download Certificate (Base64) to Fluix certificate
    keep USER ID ATTRIBUTE in Fluix empty (it’s an advanced option to receive email from SAML Response using additional claims)
    press Save Changes in Fluix.
    
    
16. Once the configuration is done, you should be able to login Fluix using SSO from the page: https://login.fluix.io/sso
    

Feel free to contact us at support@fluix.io if you have any questions or comments.