How to Set Up Single-Sign-On with Azure

Updated 1 year ago by Alex Alberti

Prerequisites include:

• Organization Administrator access to your organization’s LearnPlatform account
• Azure Administrator access through your organization
• Your organizations subdomain must be listed in LearnPlatform's setting configurations

Configuring LearnPlatform Account

1. Sign in to your LearnPlatform administrator account, click on:
   Settings > Single Sign On > Single Sign On Type > SAML 2.0 

1. Toggle on the Use organization domain for callback urls at the bottom of your Single-Sign-On page.

Initial Azure Configuration

1. In a separate window or tab, sign in to your Azure portal.
2. Search for Enterprise Applications > Select Enterprise Applications > Click New Application > Click Create your own application
3. From the pop-up box on the right titled “Create your own application”
   1. Fill in the name you want to appear in Azure’s MyApps (e.g. “LearnPlatform”)
   2. Ensure that the options “Integrate any other application you don't find in the gallery (Non-gallery)” is selected 
   3. Click Create

1. From the App Overview page, select Properties from the left menu.
   1. Download the following image to use as the icon for your custom SAML app. Upload this image as the App Icon.
   2. Select file to upload.
   3. Click Save

1. Navigate back to the Overview screen, click Setup single sign on > Get Started, click SAML, click the Edit button for the Basic SAML Configuration section.

1. While in the the Basic SAML Configuration pop up screen
   1. Copy the metadata url from the Single Sign-On setup screen in the LearnPlatform tab (bottom of the SSO setup screen)

   

1. Paste this URL into the Identifier (Enitity ID) text box in Azure Portal’s Basic SAML Configuration.

1. Copy the callback url from the Single Sign-On setup screen in the LearnPlatform tab (bottom of the SSO setup screen)

1. Paste this URL into the Reply URL text box

1. Click Save

Finish Configuring LearnPlatform Account

1. Navigate back to Set up Single Sign-On with SAML in the Azure portal and click Edit on the Attributes & Claims section.
2. From Attribute and Claims page, select either Claim name for name/user principal (if your email address is the same as your Azure login id) or email (if your Azure login id is different from your email address).  This email address must match the email address of the user in LearnPlatform.

1. Paste this value into the Email Attribute text box on the LearnPlatform Single Sign-On setup screen 

1. Select the Claim name for Given Name from Azure’s Attribute and Claims page 

1. Paste this value into First Name Attribute text box on the LearnPlatform Single Sign-On setup screen

1. Select the Claim name for Surname from Azure’s Attribute and Claims page

1. Paste this value into Last Name Attribute text box on the LearnPlatform Single Sign-On setup screen

1. Navigate back to Set up Single Sign-On with SAML in the Azure portal and scroll to the SAML Signing Certificate section and click the Download link for Certificate (Base64).

1. Open this downloaded file in a text editor and copy all the text in the file.
2. Paste this certificate text into the Certificate text box on the LearnPlatform Single Sign-On setup screen.  The text should appear similar to the below:

1. Navigate back to Set up Single Sign-On with SAML in the Azure portal and scroll to the Set up LearnPlatform section.  
2. 1. Click the Copy to clipboard button for Login URL

1. Paste the Login URL into the Identity Provider Redirect URL text box on the LearnPlatform Single Sign-On setup screen. 

1. Click the Copy to clipboard button for Logout URL

1. Paste the Login URL into the Identity Provider Redirect URL text box on the LearnPlatform Single Sign-On setup screen. 

1. Click Apply
2. The LearnPlatform Single Sign-On configuration should look similar to below:

Assign Azure Application to Users

1. While still in the LearnPlatform Application details in the Azure portal
2. Select Users and Groups
   1. Add User/Group
   2. Select the users and groups you want to have access to LearnPlatform from Azure’s MyApps portal.
   3. Click Assign

Test Single Sign-on

1. Log into https://myapps.microsoft.com/ with a user assigned to the LearnPlatform application
2. Ensure that a LearnPlatform tile is present.
3. Clicking on the tile should log the user into LearnPlatform

You are all set!

Troubleshooting

If you have questions or need additional support, please take a look at Troubleshooting my Single Sign On (SSO) for SAML or email support@learnplatform.com.

How did we do?

Related Articles

• How to Set Up Single-Sign-On with G-Suite
• How to Set Up Single-Sign-On with Active Directory (ADFS)
• Configuring Single Sign-On (SSO) for Classlink