Skip to main content

Home

Enabling SAML Authentication for Unravel User

Follow these steps to set up SAML authentication for Unravel using Microsoft Entra ID.

Create a New Entra ID Application
New-application.png
  1. Access your organization’s Entra ID portal and log in.

  2. Navigate to Enterprise applications and Click on New Application.

  3. Search for SAML and select Entra SAML.

    Select-SAML.png
  4. Give a name for the application. For example, Unravel SAML Login and click Create.

    SAML-toolkit.png
Add a User to the Application
  1. Access the Overview page of the application that you have created.

  2. Click Assign Users and Groups.

    users-groups.png
  3. Click Add user/group.

    Add-user-group.png
  4. Add the required user and click Assign.

    assign-user.png
Set Up Single Sign-On (SSO)
  1. Go to the application’s overview and select Single sign-on.

    setuo-single-signon.png
  2. Choose SAML as the SSO method.

    SAML-Single_signon.png
  3. Configure SAML settings and click Save.

    Basic-SAML-Configuration.png
    • Identifier: Use the Unravel instance name.

    • Reply URL: <Unravel instance>/saml/consume

    • Sign-on URL: Instance domain name.

  4. Click Add Group Claims, select the required Group Claims, and click Save. This is an optional step.

    Group-claims.png
Create the Unravel configuration JSON file

Example JSON file:

JSON-file.png
  1. Open a text editor and create a new JSON file.

  2. Enter configuration details based on the following SSO settings.

    entrypoint

    SAML Login URL

    issuer

    Identifier

    Logouturl

    Logout URL under Set up Unravel SAMl Login

    Callbackurl

    Reply URL under Basic SAML Configuraiotn

    Unravel mapping

    username

    The default is User email address

    groups (optional)

    Claim name of the group under Attributes and Claims

    certificate

    SAML Certificate

    SAML-certificate.png
  3. Save the file as unravel_saml_config.json.

For more details on how to use the unravel_saml_config.json file to enable SAML, see here.

Test the application
  1. Click Test this application on the Single Sign-on page. The Test Single Sign on with Unravel SAML Login page is displayed.

  2. Click Test Sign in. The Unravel URL opens.

    Test-application.png
  3. Click SAML Sign in. The Microsoft account is displayed, allowing you to log in using SAML.

    SAML_Sign_in.png