User Account Provisioning via Azure ADFS and SSO

Microsoft Azure ADFS can be configured for SAML SSO in a few short steps.

Firstly, within Azure Active Directory → Enterprise Applications, create a new Bipsync application.

Inside the application's settings, select Single sign-on.

Edit the Basic SAML Configuration settings and set the following values:

The section should look like this (updating each URL as appropriate):

Save your changes and return to the root SAML settings view.

Edit the User Attributes & Claims settings and set them to the following:

Required Claim

Additional Claims

These additional claims are only necessary if you wish to automatically provision Bipsync user accounts when a user authenticates via SSO.

N.B.: To allow the assigned roles claim you may have to follow the steps in this article: https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-enterprise-app-role-management.

The resulting section should look like this:

Save these changes and return to the main settings view.

You should now allocate the users/groups that you wish to be able to authenticate with Bipsync via the Users & groups section.