How to set up SSO with Azure AD

This setup is completed in both your Dewy account and Azure AD. An Azure AD Enterprise plan is required to complete this setup.

1. Log into your Dewy account.
2. Click Settings, then click "Security."
3. Click the "Single Sign-On" toggle to set it to the "On" position.
4. Choose your “Sign In Method” (link back to How it Works section) by clicking the dropdown.
5. There are two pre-populated values for "Sign-on URL" and "SP Entity ID" on this page. You need these values for SSO setup in Azure AD.
6. Open a new window or tab in your browser. Log into your Azure AD tenant portal. You may need to work with your IT administrator to complete this part of the setup.
7. Search for "Enterprise Application" and click the corresponding link.
8. Click the "New application" option.
9. Click "Create your own application."
10. Complete the following fields when creating your application:
    • Name the application <your-account-name>.dewy.io
    • Select the "Non-gallery" option
    • Click the "Create" button
11. From the "Users and groups" page for your Azure AD portal, click the "Single sign-on" link. This is under "Manage."
12. Click the "SAML" option.
13. Click "Edit" for Basic SAML Configuration.
14. Complete the following:
    • Copy the "Single sign-on URL" value from Dewy and paste it into the "Reply URL (Assertion Consumer Service URL)" field in Azure AD
    • Copy the Audience URI (SP Entity ID) value from Dewy and paste it into the Identifier (Entity ID) field in Azure AD
    • In Azure AD, set the Logout URL value to https://<your-account-name>.dewy.io/admin/index.php?action=logout
    • Click "Save"
      
    The field order is different in Dewy and Azure.
15. From the SAML-based Sign-on page in Azure AD, click the "Download" link. This is next to "Federation Metadata XML" under "SAML Signing Certificate."
16. Open the XML file with your favorite text editor and copy the file's contents to your clipboard.
17. In your Dewy account:
    • Paste the XML file contents into the "SAML Metadata" field.
18. Update the "Name of Secure Login Provider." For example, you can use "Azure AD Single Sign-On"
19. Click the "Save settings" button.

Test your SSO settings

1. Go to the "SAML-based Sign-on" page in your Azure AD portal.
2. Scroll to the bottom of the page and click the "Test" button