Single Sign-On (SSO) with Microsoft Azure AD

You can enable Single Sign-On for the Pexip apps by integrating the Pexip Service with your Microsoft Azure Active Directory:

Your account manager at your local certified Pexip Partner needs to open a ticket with the Pexip Support team using the Single Sign-On (SSO) Setup Request form, and you need to supply your partner with details of your Azure AD tenant.

Note that:

  • SSO for the Pexip apps is only available for Enterprise User License customers with a minimum of 10 user licenses, and is not available for trials.
  • There is no synchronization with the SSO service. It supports sign-in only; company administrators still need to initiate user invitations.

This article explains the steps you (the customer company administrator) need to perform:

  1. Log into Azure AD portal > Enterprise applications > New application.

  2. Under Add from the gallery, search for Pexip, select this application and proceed to add it.

  3. Follow the step-by-step Pexip guide for what to fill in on this page: https://docs.microsoft.com/nb-no/azure/active-directory/saas-apps/pexip-tutorial#configure-and-test-azure-ad-single-sign-on.

    This guide also covers how to enable a user or group for the Pexip SSO application.

  4. In your request to your partner for SSO setup you need to provide the following items:

    • Login URL (SSO URL in the Pexip SSO Setup Request form)

      Example: https://login.microsoftonline.com/YOUR-AAD-TENANTID-HERE/saml2

    • Azure AD Identifier (Entity ID in the Pexip SSO Setup Request form)

      Example: https://sts.windows.net/YOUR-AAD-TENANTID-HERE/

    • The certificate (Base64 format) downloaded from the Azure portal.

Pexip support will then enable your organization for SSO, and your users will have to be added by you in a group or to the application so they are allowed to use it for Pexip SSO.