Enabling SAML Authentication for Unravel User
Follow these steps to set up SAML authentication for Unravel using Microsoft Entra ID.
Create a New Entra ID Application
Access your organization’s Entra ID portal and log in.
Navigate to Enterprise applications and Click on New Application.
Search for SAML and select Entra SAML.
Give a name for the application. For example, Unravel SAML Login and click Create.
Add a User to the Application
Access the Overview page of the application that you have created.
Click Assign Users and Groups.
Click Add user/group.
Add the required user and click Assign.
Set Up Single Sign-On (SSO)
Go to the application’s overview and select Single sign-on.
Choose SAML as the SSO method.
Configure SAML settings and click Save.
Identifier: Use the Unravel instance name.
Reply URL: <Unravel instance>/saml/consume
Sign-on URL: Instance domain name.
Click Add Group Claims, select the required Group Claims, and click Save. This is an optional step.
Create the Unravel configuration JSON file
Example JSON file:
Open a text editor and create a new JSON file.
Enter configuration details based on the following SSO settings.
entrypoint
SAML Login URL
issuer
Identifier
Logouturl
Logout URL under Set up Unravel SAMl Login
Callbackurl
Reply URL under Basic SAML Configuraiotn
Unravel mapping
username
The default is User email address
groups (optional)
Claim name of the group under Attributes and Claims
certificate
SAML Certificate
Save the file as unravel_saml_config.json.
For more details on how to use the unravel_saml_config.json file to enable SAML, see here.
Test the application
Click Test this application on the Single Sign-on page. The Test Single Sign on with Unravel SAML Login page is displayed.
Click Test Sign in. The Unravel URL opens.
Click SAML Sign in. The Microsoft account is displayed, allowing you to log in using SAML.