Single sign-on with Azure

Overview

Azure Active Directory (Azure AD) is Microsoft's cloud-based directory and identity management service that you can integrate with Split's SAML 2.0 API to allow users to log into Split using their single sign-on (SSO) credentials. Learn more about configuring SAML in Split.

Create SSO app

1. Navigate to manage.windowsazure.com.
2. Click Active Directory in the left navigation panel (you may need to scroll down).
   
   
3. Select the directory to use for SSO.
4. Select the Applications section along the top navigation bar.
   
   
5. Click Add at the bottom of the screen.
   
   
6. Select Add an application from the gallery.
7. Select Custom > Add an unlisted application my organization is using.
8. Type in a name (for example, Split) as the application name, and then click the checkmark at the bottom of the screen.
   
   
9. After the application is created, select Configure single sign-on.
   
   
10. Select Microsoft Azure AD Single Sign-On. Click the next arrow at the bottom of the page.
    
    
11. Enter placeholder URLs. These will be replaced in later steps. Click the next arrow.
    
    
12. Click Download Metadata (XML), then check the box confirming that you have configured SSO. Click the next arrow.
    
    
13. Type in an email address to use for maintenance issue notifications.

Configure SAML

If you are a Split administrator, you can configure SAML in Admin Settings.

1. Go to Admin Settings > Security > SAML.
2. Add the IdP metadata downloaded from Azure in Step 12 above.
3. Enable/disable SAML Strict Mode.
4. Enable/disable Just-in-Time User Provisioning.
5. Click Save.
   When you save these changes, you can view the summary of the SAML configuration parameters.
6. Copy the Assertion Consumer Service URL to use in the Add SAML settings procedure.

Add SAML settings

1. Go back to Azure and resume the configuration process (Applications > Configure single sign-on).
2. Go to step 2 to configure app settings.
3. Paste in the Assertion Consumer Service URL from Split. Populate the URL in both the Identifier and Reply URL fields.
   
   
4. Click through each step to the end. 

Split is now linked with Azure.