Setting Up Azure AD for Single Sign-On (SSO)

I/SSO Setup

1. Login to Azure Portal

• Login to https://portal.azure.com/.
• Navigate to “Azure Active Directory” in Azure Services.
  Or create a resource “Azure Active Directory” if you don’t have it.

2. Create a new App for Pixelz

In the navigation pane on the left, select Enterprise applications.

Go to the All applications tab, and create a new custom application.

After the new application is created, navigate to “Single sign-on”

3. Configure SAML to integrate with Pixelz

Set up Single Sign-On with SAML; here is a basic SAML configuration.

Attributes & Claims

Notes: (***) The claim“http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress” needs to be set by your idp email address.

4. Assign users to the new app.

Assign the initial users or admins to the application to grant them SSO access.

• In the application screen, navigate to “Users and groups” and click “Add user/group”.

• In the User tab, select the users or admins you want to grant SSO access to, then click Select > Assign.

II/ SCIM Provisioning Setup

Note: SCIM currently supports user level not group/account level.

The Provisioning on Azure Portal will be provisioned at a regularly scheduled time interval, typically every 40 minutes. See Microsoft guide.

Or you can use “Provisioning on-demand” to provision a user into an application in seconds.

1. Get SCIM token from Pixelz

• Log in to pixelz.com
• Navigate to ACCOUNT SETTINGS > SSO LOGIN
• Copy SECRET TOKEN

2. Set up SCIM on Azure Portal

• Login to Azure Portal and select Pixelz app.
• On your SAML app overview screen, click “Provisioning” and edit provisioning properties.
• Fill properties in the tab Admin Credentials as below:

In the tab Mappings, enable “Provision Azure Active Directory Users”.

• Click to “Provision Azure Active Directory Users”
• Tick Yes under the label Enabled.
• Tick Create, Update, Delete under the label Target Object Actions
• Edit/Add Attribute Mappings:
  Click On under the label Provisioning Status
• Save and Start provisioning