Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Table of Contents

SAML SSO Configuration Steps

...

2. Configure Azure Active Directory for SAML

  1. Sign in to the Azure portal, and navigate to Azure Active Directory > Enterprise applications 
    Image Removed
    Select New application, Non-gallery applicationto Azure > Browse Microsoft Entra Gallery > Create your own application, Name your application and select the option Integrate any other application you don't find in the gallery (Non-gallery), and add an application.  
    Image RemovedImage Added 
  2. Select Select the application, select select Set up single sign-on , then select select SAML. 
    Image RemovedImage Added                                                   Image Added
  3. Under Basic SAML Configuration, select the Edit pencil iconicon and key in the Joget SAML SAML Identifier (Entity ID and ACS URL)  and Reply URL (Assertion Consumer Service (ACS) URL) copied earlier, then SaveImage Removed
    Image Added 
     
  4. Edit User Attributes & Claims, and configure the claims

    Claim Name

    Value

    Unique User Identifier (Name ID)

    user.userprincipalname

    email

    user.mail

    User.FirstName

    user.givenname

    User.LastName

    user.surname

Image Removed

...

  1. Image Added

  2. Under SAML Signing Certificate, download the Certificate (Base64). This certificate file will be used to configure the Joget SAML Plugin later.
    Image Added

  3. Select the Users and groups menu item on the left, and add the users allowed to access Joget. You may add yourself to the listing so that you can test the login later.
    Image Added


3. Configure SAML IDP Certificate in the Joget SAML Plugin

  1. Open the downloaded certificate file and copy the contents into the IDP Certificate field in the Joget SAML Plugin configuration (NOTE: copy without the -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- lines) 
    Image Added

** Select "User Provisioning Enabled" if you want to synchronize the user from the AD automatically. Otherwise, user needs to be manually created in Joget Users setup.

4. Test the SAML SSO

  1. Access the Azure My Apps Portal, click on the application, and select the user to perform the SSO. 
    Image Added
  2. If the SSO configuration is correct, the current user will be logged into Joget.


Source Code

English
This plugin source code is available in a new open source repository at https://github.com/jogetoss/. JogetOSS is a community-led team for open source software related to the Joget no-code/low-code application platform. Projects under JogetOSS are community-driven and community-supported, and you are welcome to contribute to the projects.

References

  1. https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/configure-single-sign-on-non-gallery-applications
  2. https://dev.joget.org/community/display/DX7/Joget+SharePoint+SSO+Integration

...