Set up Acubiz as Application in Entra ID

Content in this article:

• Requirements
• General procedure
• App Metadata Url and Domains
• Test of SSO connection to Acubiz EMS

Requirements

• An Entra ID Active Directory Premium license.
• One of the following roles:
  • Global Administrator
  • Cloud Application Administrator
  • Application Administrator
  • .. or owner of the service principal.

Please refer to Microsofts documentation for detailed information: 

General procedure

1. New Non-Gallery Enterprise application
   1. Add a new Non-Gallery Enterprise application, and name it “Acubiz”
2. Icon
   1. Icon for the application: https://www.acubiz.com/AcubizAzureAppIcon.png
3. Open and Add
   1. Open the created Acubiz application and add SAML-based single sign-on
4. Configure the SAML settings with the following details:
   1. Import the Acubiz Metadata URL (optional):
      https://auth.acubiz.com/federationmetadata/2007-06/federationmetadata.xml
   2. Basic SAML configuration:
      1. Identifier: https://auth.acubiz.com
      2. Reply URL: https://auth.acubiz.com/adfs/ls/
      3. Sign on URL: https://[YOURDOMAIN].acubiz.com*
         *Exact URL must be confirmed by Acubiz.
   3. User Attributes and Claims:
      1. Name: user.mail (or user.userprincipalname, if this contains the users’ email)
   4. Other SAML fields can normally be left as default

App Metadata Url and Domains

When the configuration has been completed in Entra ID, the Metadata URL from the SAML certificate must be sent to Acubiz.

Copy the link from App Federation Metadata Url:

Send the following information to your Acubiz consultant:

• The App Federation Metadata Url
• A list of your email Domains (all domains to be used with Acubiz users)

Remember to add the relevant users/groups to the Acubiz Application in Entra ID. For Acubiz, most customers simply use “All Users” group. Please wait for confirmation of configuration on the Acubiz IdP platform before proceeding to testing.

Now Test of SSO connection to Acubiz