Configuring SAML-Based Single Sign-On (SSO) with Microsoft Entra ID

Single Sign-On (SSO) Configuration Guide

This article explains how to enable Single Sign-On (SSO) for your domain account (for example, Microsoft Entra ID / Azure Active Directory) and configure it with the application.

Step 1: Create App Registration (Identity Provider)

Before configuring SSO in the application, create an app registration in your Identity Provider.

For Microsoft Entra ID (Azure AD)

1. Sign in to the Azure Portal.

2. Navigate to Microsoft Entra ID → App registrations.

3. Click New registration.

4. Provide the following details:

   • Name: Any meaningful name (for example, casengine SSO)

   • Supported account types: As per your organization’s requirement

5. Click Register.

Step 2: Add Redirect URI (Assertion Consumer Service URL)

1. Open the created App Registration.

2. Go to Authentication.

3. Under Redirect URI, click Add Redirect URI.

4. Select Web as the platform type.

5. Add the following Redirect URI (ACS URL):

   https://companyname.casengine.app/Account/AssertionConsumerService
   

6. Click Save.

This URL is required for SAML authentication to successfully return the user to the application after login.

Step 3: Configure SAML-Based Sign-On

1. Go to Enterprise Applications.

2. Open the created application (for example, sso2_casengine).

3. Select Single sign-on.

4. Choose SAML as the sign-on method.

Basic SAML Configuration

Configure the following values:

• Identifier (Entity ID): sso2_casengine

• Reply URL (ACS URL):

  https://companyname.casengine.app/Account/AssertionConsumerService
  

• Logout URL (Optional):

  https://companyname.casengine.app/Account/LoggedOut
  

Save the configuration.

Step 4: Download SAML Metadata XML

1. On the SAML-based Sign-on page, scroll to SAML Certificates.

2. Under Federation Metadata XML, click Download.

3. Save this file securely.
   This file will be uploaded to the application in the next steps.

Step 5: Configure SSO in the Casengine Application

1. Log in to the application.

2. Click the ⚙️ Settings icon in the top navigation bar.

3. Select App Settings.

4. Navigate to Integration → SAML 2 Configuration.
   
   

Step 6: Upload Metadata XML

1. Upload the Federation Metadata XML downloaded from Microsoft Entra ID.

2. Ensure the issuer, endpoints, and certificate details are populated correctly.

Step 7: Save Configuration

1. Review all SSO settings.

2. Click Save to apply the changes.

Result

After saving successfully, the “Login with SSO” button will appear on the login page.
Users can now sign in using their organization’s domain credentials.