English Español Français
Go to YuJa
  1. YuJa Help Center
  2. Engage Student Response System
  3. SSO Integrations

Integrating Azure (SAML) into Engage

Avatar
YuJa
  • Updated

Azure is a federated identity solution that connects users to applications inside and outside their institutions. Engage's flexible SSO Module Provider framework supports a wide variety of identity solutions, enabling full integration of Azure Active Directory into your infrastructure.

Integrating Engage to Azure Active Directory as an Enterprise Application

  1. Log into your Azure Active Directory Admin account.
  2. Select Enterprise applications.

    The home page for Microsoft Azure shows enterprise applications.

  3. Click New application.

    The new application button is shown.

  4. Click Create your own application.
  5. Enter a name for your application (e.g. YuJa Engage), and then click Create. Your Engage application will now appear on the Enterprise applications list in Azure.

    The Create your own application screen shows a name for the application.

  6. Select the application.

    A list of all applications created on Azure with the Engage application highlighted.

  7. In the side navbar, select Users and Groups > Add user/group. You will need to add at least one user to the Engage application. 

    The Add user/groups button is shown inside user and groups.

  8. In the side navbar, select Single sign-on > Edit.

    In the single sign-on tab within basic SAML configuration, the edit button is shown.

  9. Enter the information as shown below and then click Save.

    The basic SAML configuration setup form.

    • Identifier: https://<institution>.yuja.com
      • Example: https://evergreen.yuja.com
    • Reply URL:  https://<institution>.yuja.com/sso/consume/
      • Example: https://evergreen.yuja.com/sso/consume/
  10. In the Attributes and Claims panel, click Edit.
    The edit button for attributes and claims is shown.
  11. Click Add new claim.
    The add new claim button is shown in attributes and claims.
  12. Enter the information as shown below and then click Save.
    The name, source, and source attributes fields are filled in manage claims.
    • Name: Role
    • Source: Attribute
    • Source attribute: Enter user.<the attribute used to track roles on your SSO>.
      • Example: user.jobtitle
  13. Scroll to Set up and make a note of the following information that will be required:

    The login URL and logout URL are shown in the set up step

    • Login URL
    • Logout URL
      • Note: Engage only supports Non-Single Logout (i.e. logging out via a URL redirect to a single logout URL without additional parameters).
  14. Log in to your Engage IT manager account.
  15. In the side navbar, select Integrations.
    Engage Integrations
  16. In the Choose Integration Type drop-down field, select SSO-Azure.
  17. Enter the information as shown below, and click Save Changes. Once saved, you will be able to log in to Engage using your Azure integration.
    Engage saving Azure integration
    • General SSO Details
      • Azure SSO URL: The login URL noted in step 13.
      • Name ID Format: urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
      • Remote Logout URL: The logout URL noted in step 13.
    • User Provisioning 
      • Given Name Attribute: 
        http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname
      • Family Name Attribute: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname
      • Email Attribute: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress
      • Role Attribute: http://schemas.microsoft.com/ws/2008/06/identity/claims/role
    • Role Mapping
      • IT Manager: Enter your SSO role, equivalent to the IT Manager role on Engage.
      • Instructor: Enter your SSO role equivalent to the instructor role on Engage.

Related articles

Contact Support