Microsoft Entra ID - Azure Active Directory
SAML (Security Assertion Markup Language) and SSO (Single Sign-On) provide a streamlined and secure method for organizations of any size to manage access to various services. These technologies allow easy integration of domain-wide access, enabling team members to utilize their official email addresses for authentication. With SSO, users can effortlessly sign up and sign into platforms, like MuchSkills, using their corporate email addresses. This process not only simplifies the joining of teams on such platforms but also ensures a seamless and secure user experience. The convenience and security offered by SAML/SSO are particularly valuable for end users, as they can access multiple services without the need to manage numerous credentials, enhancing both efficiency and security in their daily operations. These instructions explains how you can enable and enforce SAML/SSO for MuchSkills for organisations using Azure AD.
How to
Step 1:
Contact MuchSkills support to add your domain/s at support@muchskils.com
Step 2:
1. Log in to your Azure Portal
2. Go to Azure Active Directory
3. Go to Enterprise applications
4. Click New application
5. Click Create your own application
6. Enter MuchSkills as the name of your app and click Create
7. Click on Single Sign-on
8. Select SAML
9. Click Edit on Basic SAML configuration
10. Enter https://app.muchskills.com/auth/saml in Identifier (Entity ID)
11. Enter your SSO url in Reply URL
12. Click Save
13. Click Edit on User attributes & Claims
14. Click on Unique User Identifier (Name ID)
15. Set Source attribute to user.mail
16. Click Save
17. Make sure you have the following additional claims
18. You're done!
Step 3:
MuchSkills setup
1.Go to Security & SAML in team settings (Team > Edit > Security & SAML)
2. Enter or paste the IDP Metadata URL. See the attachments to find the
URL for the specific IDP
3. You can activate SAML and, if desired, enforce its usage. To do this, go back to 'Security & SAML' in the team settings (Team > Edit > Security & SAML), and switch on 'Enable SAML'. You also have the option to toggle 'Enforce SAML'.
It's crucial to test the SAML login process after these changes. Ensure everything is working correctly by logging out and attempting to log in again using the SAML method. This step confirms the successful integration of the SAML setup with MuchSkills.
Important to know
After completing the SAML setup, make sure you assign users and/or groups who should have access to the MuchSkills application.
You can do this by going to:
Azure Portal > Azure Active Directory > Enterprise Applications > MuchSkills > Users and groups > Add user/group
If unsure, ask your system administrator for assistance.
It's crucial to test the SAML login process after all above changes. Ensure everything is working correctly by logging out and attempting to log in again using the SAML method. This step confirms the successful integration of the SAML setup with MuchSkills.