Skip to main content
Eptura Knowledge Center

Configure Microsoft Entra for SSO using SAML 2.0

Register Enterprise App on Entra ID for Ping Federate

Create the Application

  1. Sign in to the Microsoft Entra admin center as at least a Cloud Application Administrator.
  2. Browse to Entra ID > Enterprise Applications.

clipboard_8396ec51-e433-4401-a408-77c79f688de4.png

  1. Click the New Application button and it redirects to Browse Microsoft Entra Gallery.

clipboard_277ae6bf-d606-4d52-a19e-6b518bc47fa5.png

  1. Click Create your own application.

clipboard_3929443a-c51c-4300-8a27-30c1eb7e270a.png

  1. Give your application a name.
  2. Select  the Integrate any other application you don't find in the gallery (Non-gallery) option. 
  3. Click the Create button and the application overview displays. 

Enable the SSO

clipboard_0a6d20b2-487c-468a-9c04-1b366033ab68.png

  1. Select Set up single sign-on
  2. Select SAML as the single sign-on method. 

Configure Basic SAML settings

clipboard_f950897b-d01f-4999-8f34-c88fb72be1b9.png

  1. Under Basic SAML Configuration, click Edit.
  2. In the Identifier (SP Entity ID) field, enter the SAML 2.0 Entity ID URL.
  3. In the Reply URL(Assertion Consumer Service URL) field, enter the URL <SAML 2.0 Entity ID>/sp/ACS.saml2. Note: The SAML 2.0 Entity ID URL is obtained in the pre-requisite.
  • Stage SAML 2.0 Entity ID: https://ssouatadmin.epturacloud.com:9031
  • Prod SAML 2.0 Entity ID: https://sso.epturacloud.com
  1. Save the configuration. 

Obtain Federation Metadata

  1. Under "SAML Certificates", copy the App Federation Metadata URL
  2. Download the Metadata XML file. 

 clipboard_bc623c8e-98a8-4544-bc01-5217746c3739.png

When the app is registered in Customers IDP, reach out to the Eptura Implementations team for PING registration. After that is done the SSO setup can be tested with the Customer.