Federated Authentication Settings
7 min
create & configure app in entra id (formerly azure ad) throughout this document, refers to the url of your blueprint site (example https //demo blueprintcloud com) for blueprint cloud customers, your blueprint url would have been provided to you by support or your success manager create the app navigate to the microsoft entra admin center ( https //entra microsoft com https //entra microsoft com ) browse to identity > applications > enterprise applications > all applications select new application select create your own application name your app (e g , “blueprint sso”) select the radio button for integrate any other application you don't find in the gallery (non gallery) select create configure the app navigate to single sign on select saml edit basic saml configuration and populate the fields as follows for sp initiated sso identifier (entity id) /login/samlhandler ashx reply url (assertion consumer service url) /login/samlhandler ashx sign on url /index html relay state and logout url are not required and can be left blank \ for sp & idp initiated sso identifier (entity id) \<yourblueprinturl>/login/samlhandler ashx/?host=https%3a%2f%2f\<yourblueprinturl> reply url (assertion consumer service url) \<yourblueprinturl>/login/samlhandler ashx sign on url \<yourblueprinturl>/index html relay state and logout url are not required and can be left blank download the federated metadata xml file from the saml certificates section depending on your corporate it policies and the enterprise application’s assignment required setting, you may need to assign users or groups to the application before they can sign in refer to microsoft’s documentation for more information properties of an enterprise application https //learn microsoft com/en us/entra/identity/enterprise apps/application properties#assignment required manage users and groups assignment to an application https //learn microsoft com/en us/entra/identity/enterprise apps/assign user or group access portal?pivots=portal#assign users and groups to an application using the microsoft entra admin center configure blueprint from settings, expand advanced settings and select federated authentication settings for information on how to access the admin portal, see about the administration portal docid\ albd8z84lbz7jcfoalgu5 check the enable federated authentication checkbox click the auto fill with saml metadata button and upload the xml file you downloaded in step 4 from the previous section modify the following fields in the login settings section logout url enter your blueprint url (e g , https //demo blueprintcloud com https //demo blueprintcloud com ) login prompt value enter the text you want to display below the login button on blueprint’s login page directing your users to log in with sso for example, you can enter “login with microsoft entra id” users will need to click this link to trigger sp initiated sso attribute claim rule name enter http //schemas xmlsoap org/ws/2005/05/identity/claims/name http //schemas xmlsoap org/ws/2005/05/identity/claims/name ” to use entra id’s default claim for user principal name (the end user’s email address) create blueprint users once configuration is complete, an individual's username must be set to their microsoft 365 email address to ensure that their user principal name and blueprint username match