{"id":64661,"date":"2021-09-16T10:37:28","date_gmt":"2021-09-16T09:37:28","guid":{"rendered":"https:\/\/officebooking.com\/?post_type=ht_kb&p=64661"},"modified":"2023-04-26T11:17:32","modified_gmt":"2023-04-26T09:17:32","slug":"sso-azure-ad","status":"publish","type":"ht_kb","link":"https:\/\/officebooking.com\/nl\/kb-article\/sso-azure-ad\/","title":{"rendered":"Single Sign On: Azure AD"},"content":{"rendered":"

Officebooking supports Single Sign On (SSO) logins through SAML 2.0 when you\u2019re on the Business Plus, Enterprise edition or subscribed to SSO in combination with any other subscription. We support both SAML 2.0 via self hosted Azure AD.<\/p>\n

\n

If you\u2019re not familiar with Active Directory and SSO concepts, please start here<\/a>.<\/p>\n<\/p>\n

Step 1: Access to OfficeAdmin and AD environment<\/h3>\n<\/div>\n
\n

This guide assumes someone in your organization (or Officebooking Support) has already created an Admin account for you. This account will give you access to the OfficeAdmin portal.<\/p>\n

Next, you\u2019ll need administrative access to your company Azure AD environment. Once you\u2019ve gained access to both environments you can start implementing the integration.<\/p>\n<\/p>\n

Step 2: Set identifier in the OfficeAdmin<\/h3>\n<\/div>\n
\n
    \n
  1. Login to the OfficeAdmin portal and go to the ‘Settings’ page in your menu. Open the tab ‘Integrations’ on the top of the page.<\/li>\n
  2. Here you choose the ‘Single Sign On’ option.<\/li>\n
  3. First select ‘Microsoft’.<\/li>\n
  4. Enter an SSO id that resembles your company name<\/strong>.<\/li>\n
  5. The SSO id is included in the SSO metadata URL which will be created later in the process.<\/li>\n<\/ol>\n

    \"\"<\/p>\n<\/p>\n<\/div>\n

    \n

    Step 3: Configure Azure AD<\/h3>\n
      \n
    1. Login to Microsoft Azure Active Directory admin center.<\/li>\n
    2. Select the button ‘Enterprise applications’ in the left hand menu.<\/li>\n
    3. Select ‘New application’, then select ‘Create your own application’ and enter a name for the application, i.e. ‘Officebooking’.<\/li>\n
    4. Start with assigning users and groups. Select which users should get access to the Officebooking app.<\/li>\n
    5. After assigning users and groups, go back and select the button ‘Set up single sign on’.<\/li>\n
    6. Then select the option ‘SAML’.<\/li>\n
    7. Here you have to add the Identifier<\/strong> and Reply URL<\/strong> for the Officebooking app.<\/li>\n<\/ol>\n<\/div>\n
      <\/div>\n
      \n

      For Identifier (Entity ID) you need to enter the following url. Change the ssoID<\/strong> in the url to the id you\u2019ve entered in the OfficeAdmin portal in step 2.<\/p>\n

      https:\/\/login.officebooking.net\/sso\/access\/[your configured ssoID from step 2]<\/span>\/metadata<\/strong><\/p>\n<\/p>\n<\/div>\n

      \n

      For Reply URL (Assertion consumer Service URL) enter the following url.
      \nAgain change the ssoID<\/strong> to your own id<\/strong>.<\/p>\n

      https:\/\/login.officebooking.net\/sso\/access\/[your configured ssoID from step 2]<\/span>\/consume <\/strong><\/p>\n<\/p>\n<\/div>\n

      \"\"<\/p>\n<\/p>\n

      Step 4: Enter user attributes<\/h3>\n
      \n

      Next, enter the attributes. We will need at least the following attributes:<\/p>\n