Page History

...

Install the Joget SAML Plugin from the Joget Marketplace.
In the Joget System Settings > General Settings, set API Domain Whitelist to * (IMPORTANT NOTE: If this is not set, you will get a 400 Forbidden error when performing the SSO)
Code Block
theme Emacs
title Important Note
If this is not set, you will get a 400 Forbidden error when performing the SSO.
In the Joget System Settings > Directory Manager, select the Joget SAML Plugin.
In the Joget SAML Plugin configuration, copy the Entity ID and ACS URL. (IMPORTANT NOTE: Azure AD requires the ACS URL to be HTTPS so your Joget installation must be running under HTTPS )
Code Block
title Important Note
Azure AD requires the ACS URL to be HTTPS so your Joget installation must be running under HTTPS.
Image Modified

2. Configure Microsoft Entra ID for SAML

Sign in to the Azure portal , and navigate navigate to Azure > Browse Microsoft Entra Gallery
Image Removed
Select > Create your own application, . Name your application and select the Integrate any other application you don't find in the gallery (Non-gallery), option and click Create to add an application.
Image RemovedImage Added
Select Select the application, select Set up single sign-on, then select SAML.
Image Modified
Image Added
Under Basic SAML Configuration, select the Edit pencil icon and key in the Joget SAML SAML Identifier (Entity ID) and Reply URL (Assertion Consumer Service (ACS) URL) copied earlier, then Save.
Image Modified
Edit User Attributes & Claims, and configure the claims

Claim Name
Value
Unique User Identifier (Name ID)
user.userprincipalname
email
user.mail
User.FirstName
user.givenname
User.LastName
user.surname
Image Modified
Under SAML
Certificate
Certificates, download the Certificate (Base64). This certificate file will be used to configure the Joget SAML Plugin later.
Image Removed
Image Added
Select the Users and groups menu item on the left, and add the users allowed to access Joget. You may add yourself to the listing so that you can test the login later.
Image Modified

...

Access the Azure My Apps Portal, click on the application, and select the user to perform the SSO.
Image Modified
If the SSO configuration is correct, the current user will be logged into Joget.

...

Claim Name	Value
Unique User Identifier (Name ID)	user.userprincipalname
email	user.mail
User.FirstName	user.givenname
User.LastName	user.surname