Skip to main content

SAML 2.0 Configuration Example

This section explains how to configure SAML 2.0 providers for Microsoft Azure, Okta and OneLogin, with reference examples for each.

Microsoft Azure​

Provider information​

ParameterExample
Discovery Endpointhttps://login.microsoftonline.com/c2c50f21-66a7-41b4-9e9b-d401358e19e6/federationmetadata/2007-06/federationmetadata.xml?appid=458ee5eb-e22d-4dd1-a4e5-5d473c79e133
Entity IDhttps://yourserver/biwebserver
Provider Entity IDhttps://sts.windows.net/yourentityID/
Provider Login Endpointhttps://login.microsoftonline.com/yourentityID/saml2
Provider Logout Endpointhttps://login.microsoftonline.com/yourentityID/saml2
SAML2 ACS URL
  • Web Server: https://yourserver/Auth/CallbackSaml2
  • Excel Add-in: http://localhost:44390/excelAddin/loginCallback
    • Logout URLhttps://yourserver/Logout/LoggedOut
    CertificateSAML2Certificate.cer
    User Identifiernameidentifier

    Authentication configuration example​

    FieldExample
    ActivateDisabled
    DescriptionSign In With Azure[SAML2]
    Discovery Endpointhttps://login.microsoftonline.com/c2c50f21-66a7-4b4-9e9b-d401358e19e6/federationmetadata/2007-06/federationmetadata.xml?appid=458ee5eb-e22d-4dd1-a4e
    Entity IDhttps://[your_domain]/biwebclient
    Provider Entity IDhttps://sts.windows.net/c2c50f21-66a7-4b4-9e9b-d401358e19e6/
    Provider Login Endpointhttps://login.microsoftonline.com/c2c50f21-.../saml2
    Provider Logour Endpointhttps://login.microsoftonline.com/c2c50f21-.../saml2
    Saml2 ACS URL
  • Web Server: http://[your-webclient-domain]:82/Auth/CallbackSaml2
  • Excel Add-in: http://localhost:44390/excelAddin/loginCallback
    • Logout URLhttp://[your-webclient-domain]:82/Logout/LoggedOut
    CertificateSAML2 Certificate.cer
    User Identifiernameidentifier
    Force reauthentificationOff
    Allow remember meOff

    Map users example​

    FieldExample
    UsernameADMIN
    NameADMIN
    Email[email protected]
    User Identifier[email protected]

    Okta​

    Provider information​

    ParameterExample
    Discovery Endpoint
    Entity ID
  • Web Server: https://yourserver/biwebserver
  • Excel Add-in: https://yourserver/exceladdin
    • Provider Entity IDhttp://www.okta.com/yourentityID
    Provider Login Endpointhttps://dev-40198417.okta.com/app/dev-40198417_saml2_1/yourentityID/sso/saml
    Provider Logout Endpointhttps://dev-40198417.okta.com/app/dev-40198417_saml2_1/yourentityID/sso/saml
    SAML2 ACS URL
  • Web Server: https://yourserver/Auth/CallbackSaml2
  • Excel Add-in: https://localhost:44390/excelAddin/loginCallback
    • Logout URLhttps://yourserver/Logout/LoggedOut
    Certificateokta.cert
    User Identifiernameidentifier

    Authentication configuration example​

    FieldExample
    ActivateDisabled
    DescriptionSign In With Okta
    Discovery Endpointhttps://login.microsoftonline.com/c2c50f21-.../federationmetadata.xml?appid= ...
    Entity IDhttps://[your_domain]:82/biwebclient
    Provider Entity IDhttp://www.okta.com/...[your_EntityId]
    Provider Login Endpointhttps://dev- <oktaID>.okta.com/app/dev-<oktaID>_saml2/1.../sso/saml
    Provider Logout Endpointhttps://dev- <oktaID>.okta.com/app/dev-<oktaID>_saml2/1.../slo/saml
    Saml2 ACS URL
  • Web Server: http://[your-webclient-domain]:82/Auth/CallbackSaml2
  • Excel Add-in: http://localhost:44390/excelAddin/loginCallback
    • Logout URLhttps://[your_domain]:82/Logout/LoggedOut
    CertificateSAML2 Certificate.cer
    User Identifiernameidentifier
    Force reauthentificationOff
    Allow remember meOff

    Map users example​

    FieldExample
    UsernameADMIN
    NameADMIN
    Email[email protected]
    User Identifier[email protected]

    OneLogin​

    Provider information​

    ParameterExample
    Discovery Endpointhttps://app.onelogin.com/saml/metadata/cbfbba1c-baf4-4b65-a97c-d2706d631a36
    Entity IDhttps://yourserver/biwebserver
    Provider Entity IDhttps://app.onelogin.com/saml/metadata/yourentityID/
    Provider Login Endpointhttps://your-onelogin-server/trust/saml2/http-redirect/sso/yourentityID/
    Provider Logout Endpointhttps://your-onelogin-server/trust/saml2/http-redirect/slo/yourentityID/
    SAML2 ACS URL
  • Web Server: https://yourserver/Auth/CallbackSaml2
  • Excel Add-in: http://localhost:44390/excelAddin/loginCallback
    • Logout URLhttps://yourserver/Logout/LoggedOut
    CertificateSAML2Certificate.cer
    User Identifiernameid

    Authentication configuration example​

    FieldExample
    ActivateDisabled
    DescriptionSign in With OneLogin
    Discovery Endpointhttps://app.onelogin.com/saml/metadata/[attributes-and-entityID]
    Entity IDhttps://yourserver/biwebclient
    Provider Entity IDhttps://app.onelogin.com/saml/metadata/yourentityID
    Provider Login Endpointhttps://your-onelogin-server/trust/saml2/http-redirect/sso/yourentityID
    Provider Logour Endpointhttps://your-onelogin-server/trust/saml2/http-redirect/slo/yourentityID
    Saml2 ACS URL
  • Web Server: http://[your-webclient-domain]:82/Auth/CallbackSaml2
  • Excel Add-in: http://localhost:44390/excelAddin/loginCallback
    • Logout URLhttp://[your-server]/Logout/LoggedOut
    CertificateSAML2 Certificate.cer
    User Identifiernameidentifier
    Force reauthentificationOff
    Allow remember meOff

    Map users example​

    FieldExample
    UsernameADMIN
    NameADMIN
    Email[email protected]
    User Identifier[email protected]