How to add SAML configuration with Azure

This tutorial will show you how to configure SAML with Azure AD for gridscale. This way you keep your administration effort low and end up with only one user management.

What is SAML?

SAML (Security Assertion Markup Language) is an open standard used primarily for exchanging authentication information. SAML increases the security standard in your company and simplifies the administration effort. With SAML SSO you can log in to different web applications with only one account. This saves time, is user-friendly, and, above all, is secure. Users only need to remember one set of credentials.

Add SAML configuration to Azure AD

If you want to log in to your gridscale cloud or partner panel, you can also do this using SAML. This step-by-step guide shows you how to add a SAML configuration to Azure AD.

Step-by-step guide

1. Log in to your Azure account

2. Click on Azure Active Directory

Azure Services Overview

3. Click on Enterprise applications

Options Enterprise Applications

4. Click on „New application“

New Application

5. Click on „Create your own application“

Create New Application

6. Create a new application with the following settings:

Application Options

7. After your application has been created, click on it and choose “Single-sign-on”

Choose SSO
Choose SSO Step 2

8. Now you see the “SAML-based Sign-on” screen

SSO Sign On Page

9. Now enter the EntityID and the Reply URL.

At first, enter only the values that work. We will edit this in a later step, for example, https://partner.gridscale.io/Panel/Login

Options SSO Application

10. Download the “Certificate (Base64)” file from the “3rd SAML Signing Certificate” and convert it to pem format

You can easily convert the file to the pem format using OpenSSL: OpenSSL x509 -in cert.cer -outform pem -out cert.pem

openssl x509 -in cert.cer -outform pem -out cert.pem
PEM Download

11. Now add the users who will later log in with SAML.

Ensure the users are registered in the gridscale Partner Panel with the same email address as in Azure AD.

Compare Users Azure gridscale

12. Log in to the Partner Panel

13. Choose “SAML” in the settings and create a new application

14. Enter your “Entity ID” and your “SSO URL”.

You can find these values in your Azure application.

Identity Provider Information
SSO URL & Entity ID

15. Now upload the pem certificate

If you are unsure how to do this, go to step 10.

Upload Certificate

16. After you have saved your settings in the Partner Panel, you will receive the required “Entity ID” and “Reply URL”.

With these values, you can now edit your “Base SAML Configuration” in Azure (see step 9).

Entity and Reply URL

17. Now create a new certificate in Azure

Make sure you use the option “Sign SAML Response and assertion”. Otherwise, the login to the gridscale website will not work.

Verifikation SAML Response

18. Download the certificate and convert it to pem format.

Then upload it back to the Partner Panel (see steps 10 and 15).

Congratulations! You have successfully configured SAML with Azure AD for gridscale.