Single Sign-On (SSO)
This document explains how to connect Azure Active Directory SSO to Xecta product platform(s) using SAML2.0.
Need help? Contact Support
Other Readings: Azure Enterprise Applications, About AWS Cognito, Azure AD integration with AWS Cognito
The Xecta product platform uses AWS Cognito to manage customer identity and access management (CIAM). To enable customer initiated SSO via Azure AD the customer must create and configure an Azure Enterprise Application. The tutorial below explains each step to create and configure the Enterprise Application. To complete this tutorial the person must have Azure privileges to administer Enterprise Applications
As an Azure Administrator open the portal.azure.com and navigate to Enterprise Applications. Select Create new application. Select "Integrate any other application (non-gallery)" Use "Xecta" as the application name.
SAML Configuration Values
Reply URL: https://prod.authenticate.onxecta.com/saml2/idpresponse
Identifier: urn:amazon:cognito:sp:us-east-1_KY22t6l1j
Download the Federation Data XML file
Upload the file to the Xecta Secure File Transfer system. Contact or your customer account representative to gain access to the Secure File Transfer System. Once you have access drop the XML file into the drop zone and submit the file. Secure file transfer is provided by SendSafely. Support will provide you with a dropzone URL similar to https://xecta.sendsafely.com/dropzone/aaa.bbb.ccc
You will get notified by email once SSO has been setup on your account.
Once SSO integration is complete test the Federation setup using the "Test" at the bottom of the Azure SAML configuration screen
Select "Users and Groups" from the left hand menu
Add a user and or groups using the Azure AD user/group search box provided. Save when complete. These users or groups will be permitted to access the Xecta Product Platform via SSO