SSO: Microsoft Entra ID (former Azure Active Directory) SAML Integration Set-up

This section will help you create a SAML integration and get a metadata.xml file from your SSO Identity Provider Microsoft Entra ID.

If your organization uses Microsoft Entra ID to access applications, you can use it to sign in to AB Tasty as well. To create AB Tasty application to your Microsoft Entra ID tenant, you must have a Microsoft Entra ID account with one of the following permissions:

• One of the following roles: Global Administrator, Cloud Application Administrator, or Application Administrator.

To use Microsoft Entra ID to access AB Tasty, you first need to add it as a new SAML application within Microsoft Entra ID, then add the connection information for Microsoft Entra ID to AB Tasty.

To perform this configuration, you need an Admin profile in Microsoft Entra ID. If you do not have one, please contact your IT team.

Configure a new SAML integration

1

Log in to your Microsoft Entra ID account with the required permissions.

2

In the home page left panel, select Enterprise applications.

3

On the Enterprise Applications page, select + New Application.

The Microsoft Entra Gallery opens.

4

In the Microsoft Entra ID Gallery, select + Create your own application.

5

In the Create your own app window, name your new app "AB Tasty".

6

Select Integrate any other application you don't find in the gallery (Non-gallery).

7

At the bottom of the window, select Create to create your new app.

8

On the Overview page select Single sign-on from the navigation menu, or click on Set up Single sign on card.

9

On the Single sign-on page, select SAML.

10

Go to Basic SAML Configuration section (1) and select Edit.

11

Fill these values in Microsoft Entra ID under Basic SAML Configuration

Identifier (Entity ID):
Reply URL (Assertion Consumer Service URL):
Sign on URL (Optional):	https://app2.abtasty.com/ssologin
Relay State (Optional):	https://app2.abtasty.com/experiments
Logout Url (Optional):	https://app2.abtasty.com/logout

12

Select Save to save these changes

13

Go to the SAML Certificates section (3) on the SAML-based Sign-on page.

14

Download Federation Metadata XML.

You can now import it on AB Tasty.

To ensure your XML is valid, you can use online tools such as https://www.samltool.com/validate_xml.php

Manage users and groups

Go to the Users and Groups section in your microsoft account to allow users/group to access the new application on Microsoft Entra ID and/or login from AB Tasty login page (https://app2.abtasty.com/ssologin).

Please make sure all Microsoft Entra ID users authorized to login AB Tasty also have an AB Tasty account.