Go to YuJa
  1. YuJa Help Center
  2. YuJa Engage
  3. SSO Integrations

Integrating Azure (SAML) into Engage

Avatar
YuJa Doc Team
  • Updated

Azure is a Microsoft product that provides a federated identity solution to connect users to applications within and outside institutions. Engage's flexible SSO Module Provider framework is designed to support a wide variety of identity solutions, enabling full integration of Azure Active Directory into your infrastructure in a few simple steps.

Integrating Engage to Azure Active Directory as an Enterprise Application

  1. Log into your Azure Active Directory Admin account.
  2. Select Enterprise Applications.

    The home page for Microsoft Azure shows enterprise applications.

  3. Click New Application.

    The new application button is shown.

  4. Click Create Your own application.
  5. Give your application a name (e.g. YuJa Engage), then click Create.

    The Create your own application screen shows a name for the application.

  6. Your Engage application will now appear on the Enterprise Applications list within Azure. Select the application.

    A list of all applications created on Azure with the Engage application highlighted.

  7. You will need to add at least one user to the Engage application. From the left-side menu, select Users and Groupsand then click Add user/group.

    The Add user/groups button is shown inside user and groups.

  8. After adding a user, click Single Sign-On from the left-side menu and click Edit within the Basic SAML Configuration panel.

    In the single sign-on tab within basic SAML configuration, the edit button is shown.

  9. Fill out the information as shown below and then click Save.

    The basic SAML configuration setup form.

    • Identifier: https://<institution>.yuja.com
      • Example: https://evergreen.yuja.com
    • Reply URL:  https://<institution>.yuja.com/sso/consume/
      • Example: https://evergreen.yuja.com/sso/consume/
  10. Next, click Edit within the Attributes and Claims panel.
    The edit button for attributes and claims is shown.
  11. Click Add New Claim.
    The add new claim button is shown in attributes and claims.
  12. Fill out the information as shown below and then click Save.
    The name, source, and source attributes fields are filled in manage claims.
    • Name: Role
    • Source: Attribute
    • Source attribute: Enter "user." without the quotes, and then enter the attribute used to track roles on your SSO.
      • Example: user.jobtitle
  13. After saving the claim above, scroll down to Set up and make note of the following information as it will be required:

    The login URL and logout URL are shown in the set up step

    • Login URL
    • Logout URL
      • Please note that Engage only supports Non-Single Logout, i.e. logging out via a URL redirect to a single logout URL without additional parameters.
  14. Next, log into your Engage IT manager account and select Integrations from the left-side menu.
  15. Select SSO-Azure from the Choose Integration Type drop-down menu, fill out the information as shown below, and click Save. Once saved, you will be able to log in to Engage using your Azure integration.
    The Engage platform's Azure integration page is shown.
    • General SSO Details
      • Azure SSO URL: The login URL noted in step 13.
      • Name ID Format: urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
      • Remote Logout URL: The logout URL noted in step 13.
    • User Provisioning 
      • Given Name Attribute: 
        http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname
      • Family Name Attribute: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname
      • Email Attribute: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress
      • Role Attribute: http://schemas.microsoft.com/ws/2008/06/identity/claims/role
    • Role Mapping
      • IT Manager: Enter your SSO role, equivalent to the IT Manager role on Engage.
      • Instructor: Enter your SSO role equivalent to the instructor role on Engage.

Related articles