...
- Install the Joget SAML Plugin from the Joget Marketplace.
- In the Joget System Settings > General Settings, set API Domain Whitelist to * (IMPORTANT NOTE: If this is not set, you will get a 400 Forbidden error when performing the SSO)
Code Block theme Emacs title Important Note If this is not set, you will get a 400 Forbidden error when performing the SSO. - In the Joget System Settings > Directory Manager, select the Joget SAML Plugin.
- In the Joget SAML Plugin configuration, copy the Entity ID and ACS URL. (IMPORTANT NOTE: Azure AD requires the ACS URL to be HTTPS so your Joget installation must be running under HTTPS )
Code Block title Important Note Azure AD requires the ACS URL to be HTTPS so your Joget installation must be running under HTTPS.
2. Configure Microsoft Entra ID for SAML
- Sign in to the Azure portal , and navigate navigate to Azure > Browse Microsoft Entra Gallery > Create your own application, . Name your application application and select the option Integrate any other application you don't find in the gallery (Non-gallery) , and add add an application.
- Select the application, select Set up single sign-on, then select SAML.
- Under Basic SAML Configuration, select the Edit pencil icon and key in the Joget SAML Identifier (Entity ID) and and Reply URL (Assertion Consumer Service (ACS) URL) copied earlier, then Save.
Edit User Attributes & Claims, and configure the claims
Claim Name
Value
Unique User Identifier (Name ID)
user.userprincipalname
email
user.mail
User.FirstName
user.givenname
User.LastName
user.surname
Under SAML Certificate, download the Certificate (Base64). This certificate file will be used to configure the Joget SAML Plugin later.
Select the Users and groups menu item on the left, and add the users allowed to access Joget. You may add yourself to the listing so that you can test the login later.
...