Single sign-on lets your users sign in to Symbiant with their Microsoft work account instead of a separate password. This article shows how to set up the Symbiant app in Microsoft Entra ID (formerly Azure Active Directory).

Note: Single sign-on (SAML SSO) is a premium add-on. It is not included as standard in any Symbiant plan. Contact your account manager to add it.

Critical: With single sign-on, the sign-in email address is case sensitive. The email address on each Symbiant user must match the case in your directory exactly. For example, [email protected] and [email protected] are treated as different people. Symbiant creates each user’s single sign-on identity from their email address.

What Symbiant Support Will Give You #

When you order single sign-on, Symbiant Support sends you three values for your system. They look like this:

Creating the App #

1. Sign in to the Microsoft Entra admin center or the Azure portal as an administrator.
2. Go to Enterprise applications and click New application.

3. Click Create your own application.

4. Name the app Symbiant and choose Integrate any other application you don’t find in the gallery (Non-gallery).

5. Click Create.

Choosing SAML #

1. Under 2. Set up single sign on, click Get started.

2. Click SAML.

Entering the Basic SAML Configuration #

1. Click the edit pencil on Basic SAML Configuration.

2. Delete any default values.
3. Enter the three values from Symbiant Support: the Identifier (Entity ID), the Reply URL and the Sign on URL.
4. Click Save.

Setting the Unique User Identifier #

1. Click the edit pencil on Attributes & Claims.

2. Click Unique User Identifier.

3. Set Source attribute to user.mail and save.

Adding a Custom Claim (Only If Support Asks) #

1. Under Attributes & Claims, click Add new claim.

2. Enter the Name that Symbiant Support gave you.
3. Set Source to Attribute.
4. In Source attribute, enter the value Symbiant Support gave you, then click Save.

Giving Users Access #

Assign the users or groups who should use Symbiant to the app (Users and groups > Add user/group). Anyone not assigned will see error AADSTS50105. See SAML Azure Errors.

What to Send Back to Symbiant Support #

Copy the app’s Federation Metadata URL and send it to us in a support ticket. We’ll finish the set-up and let you know when single sign-on is ready.

Once it is ready, turn on single sign-on for each user.