SSO with Azure AD

Overview: This article provides a walkthrough for configuration Azure AD as an identity provider for Tenfold Single Sign-On (SSO).

Tenfold SSO Configuration with Azure AD

To configure SSO with Azure AD as the Identity Provider for Tenfold, follow these updated steps:

1. Navigate to Enterprise Applications in Azure AD:

   • In the Azure AD Admin Console, go to Azure Active Directory > Enterprise Applications.

2. Add a New Application:

   • Click on + New Application and select Create your own application.
   • Enter the name of the application (e.g., Tenfold) and choose Integrate any other application you don't find in the gallery (Non-Gallery). Then click Create.

3. Configure Single Sign-On (SSO) using SAML:

   • In the left-hand menu under your newly created application, click Single sign-on.
   • Select SAML as the single sign-on method.

4. Edit Basic SAML Configuration:

   • In the Basic SAML Configuration section, click the pencil icon to edit.

   • Enter the following values:

     • Reply URL (Assertion Consumer Service URL): https://dashboard.tenfold.com/corporate-login/callback
     • Identifier (Entity ID): sso.tenfold.com

   • Click Save.

5. Update User Attributes and Claims:

   • In the User Attributes & Claims section, click the pencil icon to edit.
   • Find Name Identifier (NameID) and click the pencil icon next to it.
   • For Source Attribute, select user.mail from the dropdown, then click Save.

6. Configure SAML Signing Certificate:

   • In the SAML Signing Certificate section, download the Federation Metadata XML file by clicking Download next to it.

7. Assign Users to the Application:

   • Go back to the main application screen, and under Manage, select Users and groups.
   • Click + Add user/group to assign users who need to use Azure SSO for Tenfold.
   • Select the users, click Select, then click Assign.

8. Upload Federation Metadata XML to Tenfold:

   • In the Tenfold dashboard, navigate to the Single Sign-On configuration page.
   • Set the Domain to the desired value (e.g., acme.org or tenfold.acme).
   • Click Upload file, and select the Federation Metadata XML file downloaded from step 6.
   • Click Save.

9. Final Testing:

   • You can now use Azure AD to authenticate Tenfold. After completing this setup, users can log in using Azure AD SSO, and multi-factor authentication (MFA) can be enforced based on your Azure AD policies.