Developer Docs

Single Sign-On (SSO)

Purpose

This document explains how to connect Azure Active Directory SSO to Xecta product platform(s) using SAML2.0.

Need help? Contact Support



Overview

The Xecta product platform uses AWS Cognito to manage customer identity and access management (CIAM). To enable customer initiated SSO via Azure AD the customer must create and configure an Azure Enterprise Application. The tutorial below explains each step to create and configure the Enterprise Application. To complete this tutorial the person must have Azure privileges to administer Enterprise Applications



Tutorial

1: Register Xecta as an Azure Enterprise Application

As an Azure Administrator open the portal.azure.com and navigate to Enterprise Applications. Select Create new application. Select "Integrate any other application (non-gallery)" Use "Xecta" as the application name.



Document image


2: Setup SAML Integration



Document image




Document image


SAML Configuration Values

Reply URL: https://prod.authenticate.onxecta.com/saml2/idpresponse

Identifier: urn:amazon:cognito:sp:us-east-1_KY22t6l1j

3: Generate Federation Metadata XML file

Download the Federation Data XML file



Document image


4: Secure Upload of Federation Metadata XML file

Upload the file to the Xecta Secure File Transfer system. Contact or your customer account representative to gain access to the Secure File Transfer System. Once you have access drop the XML file into the drop zone and submit the file. Secure file transfer is provided by SendSafely. Support will provide you with a dropzone URL similar to https://xecta.sendsafely.com/dropzone/aaa.bbb.ccc

Document image


You will get notified by email once SSO has been setup on your account.

5: Test SSO Integration

Once SSO integration is complete test the Federation setup using the "Test" at the bottom of the Azure SAML configuration screen



Document image


6: Authorize Azure AD Users or Groups to access the Xecta Enterprise Application

Select "Users and Groups" from the left hand menu



Document image


Add a user and or groups using the Azure AD user/group search box provided. Save when complete. These users or groups will be permitted to access the Xecta Product Platform via SSO



Document image