SSO with Azure AD
Overview: This article provides a walkthrough for configuration Azure AD as an identity provider for Tenfold Single Sign-On (SSO).
Configuration instructions
Tenfold Administrators can easily set up SSO to leverage Azure AD as their Identity Provider by following these steps:
In Azure AD Admin console navigate to Azure Active Directory and then to Enterprise Applications.
Select All Applications and then New Application.
Select Non-Gallery Application, type in name of the application (E.g. Tenfold) and then click Add.
Click on Single Sign-On and then select SAML.
In the Basic SAML Configuration section click on the edit (Pencil) icon.
Enter the Reply URL and Entity ID then click Save.
Reply (Assertion Consumer URL):
https://dashboard.tenfold.com/corporate-login/callbackIdentifier (Entity ID):
sso.tenfold.com
In the User Attribute & Claims section click on the edit (Pencil) icon.
Click on the edit (Pencil) icon next to Name Identifier Value. In Source Attribute select user.mail from the drop-down and press Save.
In the SAML Signing Certification section click on download next to Federation Metadata XML.
Go back to the Add an Application section, select Users & Groups and press Add.
Click on Users & Groups, click on the users that are to user Azure SSO with Tenfold, then press Select and then Assign.
12. In the Tenfold dashboard, navigate to the Single Sign-On feature configuration page. Set the Domain to the value which you want your users to enter when logging in to Tenfold (E.g.
Acme,amcme.org,acme-org), click on Upload file and select the Federation Metadata XML file which was downloaded in step #9. Click Save at the bottom of the page.
You are ready to use Azure AD to authenticate in Tenfold. The below gif demonstrates the login flow with the Azure after using Microsoft multi-factor authentication:
