SSO: Microsoft Entra ID (former Azure Active Directory) SAML Integration Set-up

This section will help you create a SAML integration and get a metadata.xml file from your SSO Identity Provider Microsoft Entra ID.

If your organisation uses Microsoft Entra ID to access applications, you can use it to sign in to AB Tasty as well. To create an AB Tasty application in your Microsoft Entra ID tenant, you must have a Microsoft Entra ID account with one of the following permissions:

• One of the following roles: Global Administrator, Cloud Application Administrator, or Application Administrator.

To use Microsoft Entra ID to access AB Tasty, you first need to add it as a new SAML application within Microsoft Entra ID, then add the connection information for Microsoft Entra ID to AB Tasty.

To perform this configuration, you need an Admin profile in Microsoft Entra ID. If you do not have one, please contact your IT team.

Configure a new SAML integration

1

Log in to your Microsoft Entra ID account with the required permissions.

2

In the home page left panel, select Enterprise applications.

3

On the Enterprise Applications page, select + New Application.

The Microsoft Entra Gallery opens.

4

In the Microsoft Entra ID Gallery, select + Create your own application.

5

In the Create your own app window, name your new app "AB Tasty".

6

Select Integrate any other application you don't find in the gallery (Non-gallery).

7

At the bottom of the window, select Create to create your new app.

8

On the Overview page select Single sign-on from the navigation menu, or click on Set up Single sign on card.

9

On the Single sign-on page, select SAML.

10

Go to Basic SAML Configuration section (1) and select Edit.

11

Fill these values in Microsoft Entra ID under Basic SAML Configuration

Identifier (Entity ID):	Retrievable from your AB Tasty SSO configuration module on AB Tasty as Entity ID
Reply URL (Assertion Consumer Service URL):	Retrievable from your AB Tasty SSO configuration module on AB Tasty as ACS URL
Sign on URL (Optional):	https://app2.abtasty.com/ssologin
Relay State (Optional):	should be left empty
Logout Url (Optional):	https://app2.abtasty.com/logout

12

Select Save to save these changes

13

Go to the SAML Certificates section (3) on the SAML-based Sign-on page.

14

Download Federation Metadata XML.

You can now import it on AB Tasty.

15

^{Navigate to User Attribute & Claims}

1. Navigate to User Attributes & Claims.

2. Add a new claim for the user’s email:

   • Name: mail (or user.mail)

   • Value: set to the user’s email attribute in Entra ID (e.g., user.mail).

Manage users and groups

Go to the Users and Groups section in your Microsoft account to allow users/groups to access the new application on Microsoft Entra ID and/or log in from the AB Tasty login page (https://app2.abtasty.com/ssologin).

Please make sure all Microsoft Entra ID users authorised to log in to AB Tasty also have an AB Tasty account.