Setting up Microsoft Entra ID (Azure) SAML SSO with Spekit? This guide provides a general overview of how to create an Enterprise Application in Entra ID, configure SAML settings, and connect it to Spekit.
⚠️ Important: This guide provides a general overview of the SSO connection process and should not be used as a step-by-step configuration guide. To set up SSO with Spekit, go to the Connect page within your Spekit Web App and proceed through the in-app setup walkthrough.
📌 Quick-Jump Topics
- Step 1: Create an Enterprise Application: Setting up a new SAML app in Entra ID
- Step 2: Configure SAML Settings: Entering the Identifier and Reply URL
- Step 3: Configure Attributes and Claims: Mapping user attributes for the SAML assertion
- Step 4: Assign Users to the SAML App: Granting access to individuals or groups
- Step 5: Upload IdP Metadata to Spekit: Completing the connection in your Spekit walkthrough
Step 1: Create an Enterprise Application
How do I create a new Enterprise Application in Microsoft Entra ID?
- Log in to the Microsoft Entra ID (Azure) Admin Dashboard.
- Select Enterprise applications from the dashboard.
- Click New application.
- Click Create your own application.
- Enter Spekit as the app name.
- Under What are you looking to do with your application?, select Integrate any other application you don't find in the gallery (Non-gallery).
- Click Create.
- In the left sidebar under the Manage section, click Single Sign-On.
- Select SAML as the sign-on method.
Step 2: Configure SAML Settings
How do I enter the Identifier and Reply URL for Spekit?
- On the Single Sign-On page, click the Edit icon in the top-right corner of the Basic SAML Configuration section.
- Copy the Identifier value from your Spekit SSO walkthrough and paste it into the Identifier field.
- Copy the Reply URL value from your Spekit SSO walkthrough and paste it into the Reply URL field.
- Click Save.
Step 3: Configure Attributes and Claims
How do I map user attributes for the SAML assertion?
- Click the Edit icon in the top-right corner of the Attributes & Claims section.
- For each attribute, enter the claim name in the Name field and the corresponding value in the Source attribute field, as specified in your Spekit in-app walkthrough.
- Click Save after adding all required attributes.
Step 4: Assign Users to the SAML App
How do I grant users or groups access to the Spekit SAML application?
- In the left sidebar under the Manage section, click Users and groups.
- Click Add user/group from the top menu.
- In the panel that appears, select the users and/or groups you want to grant access to the Spekit SAML application.
- Click Select to confirm your selections, then click Assign.
Step 5: Upload IdP Metadata to Spekit
How do I complete the connection by uploading the Entra ID metadata to Spekit?
- Navigate back to the Single Sign-On page of your Spekit application.
- Scroll down to Section 3 - SAML Signing Certificate.
- Copy the App Federation Metadata URL.
- Paste this URL into the IdP Metadata URL field in your Spekit in-app SSO walkthrough.
ℹ️ What's next? After uploading the metadata URL, you can test the configuration in the next step of the in-app walkthrough. From there:
- If you plan to use JIT (Just-in-Time) user provisioning, you are done but you must notify Spekit Support that you will be using this provisioning type.
- If you plan to use SCIM provisioning, a separate SCIM walkthrough is available in Spekit for you to complete.