Workshop allows you to set up SAML SSO with Microsoft Entra. View the instructions below to add this capability for your organization.
- To begin, navigate to Microsoft Entra ID Gallery in ActiveDirectory and create a new non-gallery application
- Create a new non-gallery application and give it a unique, recognizable name
- When the setup is completed, you will automatically be redirected to the landing page for that application
- Assign users and groups to the application
- Users/Groups added here will be the only users allowed to access Workshop
- Users/Groups added here will be the only users allowed to access Workshop
- Log into Workshop as an Admin within a separate tab.
- Within your Workshop account, click on your user avatar in the top right corner and click on Settings.
- In Workshop's Settings, click on the SSO tab.
- Select "Setup Custom SSO"
- Choose Provide IdP Metadata later
- Copy Workshop Issuer (Entity ID) and ACS URL (Reply URL)
- Return to the `Overview` page in Azure and set up single sign on (SAML)
- Edit the SAML Certificate Options
- In Azure, under Basic Configuration paste the 2 URLs from step #7 in the order given, the rest can be left blank:
- Issuer (Entity ID) ➡️ Identifier (Entity ID)
- ACS URL (Reply URL) ➡️ Reply URL (Assertion Consumer Service URL)
- For signing option, choose "Sign SAML response and assertion" and select save
- Copy the App Federation Metadata URL from Azure
- Back in Workshop, scroll to the identity provider card and paste the App Federation Metadata URL from Azure and click the "Create Provider"
- Perform a test sign in from within Workshop or your identity solution to activate SSO