Skip to main content
To set up SSO authentication using Azure Active Directory:
  1. Create and set up an application in Azure Active Directory.
    1. Go to https://portal.azure.com/ and log in to your Microsoft Azure account.
    2. Go to the Azure Active Directory > Enterprise applications section.
    3. In the Add an application window, go to the Non-gallery application section and specify a name for the new application. If several tenants are used, a separate application should be created for each.
  1. Go to the Users and groups section and add all required users. Give them the User role.
  2. Go to the Single sign-on subsection and select SAML.
  1. Edit the Basic SAML Configuration section as follows:
Note: The URLs should be specified in the following format: https://<cloud-host-name>/FlexiCapture12/Login/<TenantName>/AccessToken/Saml, where <cloud-host-name> is the host name of the SaaS URL of your processing location and <TenantName> is the name of your tenant in FlexiCapture Cloud. Leave the rest of the fields blank.
  1. In the SAML Signing Certificate section, download your public certificate in Base64 format by clicking the link next to Certificate (Base64) .
  2. From the Login URL field in the Set up [application name] section, copy the URL for accessing the server of the external identity provider.
  3. Provide the following information to cloud support or the account manager :
a. The URL of your FlexiCapture Cloud region and your tenant name b. The public key certificate c. The login URL d. The image for the new Log in with… button (images in *.svg, *.jpg, and *.png formats are supported) e. The name of the external identity for the Log in with… button Once the setup has been completed by cloud support, an additional login button will appear on your login page: Log in with [IdP Name].
For more technical details about SAML authentication requests and responses that Azure Active Directory supports for Single Sign-On, please refer to this article on Microsoft.com.