Azure Microsoft Entra ID (Active Directory)

Configure SAML with Azure Microsoft Entra ID

Required information provided by Kubit Team:

Identifier (Entity ID): urn:amazon:cognito:sp:<CONNECTION_ID>
Reply URL: https://kubit-<YOUR_ORG>.auth.<REGION>.amazoncognito.com/saml2/idpresponse

To add a new application in Microsoft Entra ID:

Sign in to the Azure portal.
Search for and select Microsoft Entra ID.
In the left sidebar, choose Enterprise applications.
Choose New application.
On the Browse Microsoft Entra Gallery page, choose Create your own application.
Under What’s the name of your app?, enter kubit-sso and select Integrate any other application you don’t find in the gallery (Non-gallery). Then choose Create.

To set up Single Sign-on using SAML:

On the Getting started page, in the Set up single sign-on tile, choose Get started.
On the next screen, select SAML.
In the middle pane under Set up Single Sign-On with SAML, in the Basic SAML Configuration section, choose the edit icon.
In the right pane under Basic SAML Configuration, replace the default Identifier ID (Entity ID) with the Identifier (Entity ID) the Kubit Team has provided.
In the Reply URL (Assertion Consumer Service URL) field, enter the Reply URL the Kubit Team has provided.

In the Sing on URL (Optional) field, enter the Login URL the Kubit Team has provided.

Choose Save.
In the middle pane under Set up Single Sign-On with SAML, in the Attributes & Claims section, choose Edit.
Choose Add a group claim.
On the Attributes & Claims page, in the right pane under Group Claims, select Groups assigned to the application, and leave Source attribute as Group ID. Choose Save.
If you have a picture/photo attribute click on the Add new claim button. A new screen called Manage claim will open. User picture as Name and http://schemas.xmlsoap.org/ws/2005/05/identity/claims as Namespace. Search for a picture or photo attribute under the Source attribute field. Click on the attribute to select it and click the Save button.
Note down the Claim names under Additional claims and provide those to the Kubit Team.
Close the Attributes & Claims screen by choosing the X in the top right corner. You’ll be redirected to the Set up Single Sign-on with SAML page.
Scroll down to the SAML Signing Certificate section, and copy the App Federation Metadata Url by choosing the copy into clipboard icon. Please provide that URL to the Kubit Team.

Please, provide the collected information to the Kubit Team. Once we're done with configurations on our side we'll contact you.