Azure AD SSO

Follow these steps to add Azure as the SAML SSO provider for your workspace:

1. Open Buddy SSO settings in one browser tab.
2. In another tab, sign in to Azure and open Azure Active Directory:

3. From the left navigation, select Enterprise Applications:

4. Click the +New application button:

5. Click +Create your own application, define the app name, and click Create:

6. Go to Single sign-on and select SAML:

7. Edit the Basic SAML Configuration:

8. Fill in the application details with the data copied from Buddy SSO configuration:

   • Reply URL (Assertion Consumer Service URL) → ACS / SP Assertion Consumer Service / Single Sign-On from Buddy
   • Identifier (Entity ID) → SP Entity ID / Audience URI from Buddy
9. Save the changes.
10. Refresh Azure page
11. Save the data required for SSO configuration in Buddy for later use: Login URL, Azure AD Identifier, and download the certificate.
12. Go to Users and groups and assign users to the application according to your need:

13. Return to Buddy's SSO settings tab and provide the information you copied from Azure:

    • SSO URL / SAML Endpoint / Identity Provider Single Sign-On URL → Login URL from Azure
    • Issuer → Azure AD Identifier from Azure
    • Certificate → upload the Azure certificate you downloaded
    • Signature / Digest Method → leave at Most popular
14. Click Test configuration and enable SSO on success.
15. Sign in to your Azure account to save the SSO configuration.