---
title: Single Sign-On (SSO)
slug: single-sign-on-sso
docTags: 
createdAt: 2023-04-04T19:39:49.000Z
---

# Purpose

This document explains how to connect [Azure Active Directory](https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-whatis) SSO to Xecta product platform(s) using [SAML2.0](https://en.wikipedia.org/wiki/SAML_2.0).

Need help? [Contact Support](https://xecta.atlassian.net/servicedesk/customer/portals)

Other Readings: [Azure Enterprise Applications](https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/what-is-application-management), [About AWS Cognito](https://aws.amazon.com/cognito/), [Azure AD integration with AWS Cognito](https://aws.amazon.com/blogs/security/how-to-set-up-amazon-cognito-for-federated-authentication-using-azure-ad/)

***

# Overview

The Xecta product platform uses AWS Cognito to manage customer identity and access management (CIAM). To enable customer initiated SSO via Azure AD the customer must create and configure an [Azure Enterprise Application](https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/what-is-application-management). The tutorial below explains each step to create and configure the Enterprise Application. To complete this tutorial the person must have Azure privileges to administer Enterprise Applications

***

# Tutorial

## 1: Register Xecta as an Azure Enterprise Application

As an Azure Administrator open the **portal.azure.com** and navigate to** Enterprise Applications**. Select **Create new application**. Select **"Integrate any other application (non-gallery)"** Use "**Xecta**" as the application name.



::Image[]{src="https://api.archbee.com/api/optimize/-kIqrMCOJgmgBmRpzgKo2/bCsk506zHKm5KdsVILvvf_image.png" size="90" width="948" height="322" position="center" showCaption="false"}

## 2: Setup SAML Integration



::Image[]{src="https://api.archbee.com/api/optimize/-kIqrMCOJgmgBmRpzgKo2/9mbdOMgL5-cQdL9sMeke3_image.png" size="82" width="887" height="298" position="center" showCaption="false"}



::Image[]{src="https://api.archbee.com/api/optimize/-kIqrMCOJgmgBmRpzgKo2/twiRRJ5RVdKaEat9f9ihe_image.png" size="82" width="723" height="494" position="center" showCaption="false"}

:::hint{type="info"}
**SAML Configuration Values**

Reply URL: **https\://prod.authenticate.onxecta.com/saml2/idpresponse**

Identifier: **urn\:amazon\:cognito\:sp\:us-east-1\_KY22t6l1j**
:::

## 3: Generate Federation Metadata XML file

**Download the Federation Data XML file**



::Image[]{src="https://api.archbee.com/api/optimize/-kIqrMCOJgmgBmRpzgKo2/qY9tcBDT1_BGc3Tm_zv7y_image.png" size="84" width="975" height="448" position="center" showCaption="false"}

## 4: Secure Upload of Federation Metadata XML file

Upload the file to the Xecta Secure File Transfer system. **Contact  or your customer account representative** to gain access to the Secure File Transfer System. Once you have access drop the XML file into the drop zone and submit the file. Secure file transfer is provided by SendSafely. Support will provide you with a dropzone URL similar to [https://xecta.sendsafely.com/dropzone/aaa.bbb.ccc](https://xecta.sendsafely.com/dropzone/aaa.bbb.ccc)

::Image[]{src="https://api.archbee.com/api/optimize/-kIqrMCOJgmgBmRpzgKo2/cC3g08RuoAaLUJHqiETbU_image.png" size="60" width="699" height="510" position="center" showCaption="false"}

**You will get notified by email once SSO has been setup on your account.**

## 5: Test SSO Integration

Once SSO integration is complete test the Federation setup using the **"Test" **at the bottom of the Azure SAML configuration screen



::Image[]{src="https://api.archbee.com/api/optimize/-kIqrMCOJgmgBmRpzgKo2/bpVVGtshvkDlmeQCH6yJ-_image.png" size="72" width="675" height="296" position="center" showCaption="false"}

## 6: Authorize Azure AD Users or Groups to access the Xecta Enterprise Application

Select "Users and Groups" from the left hand menu



::Image[]{src="https://api.archbee.com/api/optimize/-kIqrMCOJgmgBmRpzgKo2/nukdUo3CB7o-_bqEtfEUp_image.png" size="76" width="657" height="410" position="center" showCaption="false"}

Add a user and or groups using the Azure AD user/group search box provided. Save when complete. **These users or groups will be permitted to access the Xecta Product Platform via SSO**



::Image[]{src="https://api.archbee.com/api/optimize/-kIqrMCOJgmgBmRpzgKo2/2diuiPuWLK_T_a_HULUB4_image.png" size="60" width="620" height="651" position="center" showCaption="false"}