Set Up Single Sign-On with Microsoft Entra ID

This guide explains how to set up SAML single sign-on (SSO) for BEAMON with Microsoft Entra ID as your identity provider.

Overview

You create an application in Microsoft Entra ID and configure it with the SAML settings provided by BEAMON. Entra ID then acts as the identity provider and authenticates users who sign in to BEAMON.

Once the setup is complete, users assigned to the application in Entra ID can sign in to BEAMON with their organisation's credentials.

Prerequisites

Before you start, make sure you have:

• admin access to Microsoft Entra ID
• the following values from the BEAMON team (contact help@beamon.ai if you don't have them yet):
  • Reply URL (Assertion Consumer Service URL)
  • Identifier (Entity ID)

At the end of the setup, you'll send the App Federation Metadata URL back to the BEAMON team.

Step 1: Create an enterprise application in Entra ID

1. Sign in to the Microsoft Entra admin center.
2. Go to Enterprise applications.
3. Click New application.
4. Select Create your own application.
5. Enter a name for the application, for example BEAMON.
6. Select Integrate any other application you don't find in the gallery (Non-gallery).
7. Click Create.

Step 2: Choose SAML as the sign-on method

1. Open the application you just created.
2. Go to Single sign-on.
3. Select SAML.

Step 3: Enter the basic SAML settings

Under Basic SAML Configuration, click Edit and enter the values provided by the BEAMON team:

• Identifier (Entity ID)
• Reply URL (Assertion Consumer Service URL)

Click Save.

Step 4: Copy the federation metadata URL

1. In the SAML Certificates section, find the App Federation Metadata URL.
2. Copy the URL and send it to the BEAMON team.

The BEAMON team uses this URL to complete the setup on the BEAMON side.

Step 5: Assign users or groups

1. In the application menu, go to Users and groups.
2. Click Add user/group.
3. Select the users or groups who should have access to BEAMON.
4. Click Assign.

Test the SSO setup

Once the BEAMON team has confirmed that the setup is complete:

1. Make sure your test user is assigned to the application in Entra ID.
2. Open the BEAMON login page.
3. Select Single Sign-On.
4. Sign in with your organisation's credentials.

If everything is set up correctly, Entra ID signs you in and redirects you to BEAMON.

Troubleshooting

If users can't sign in via SSO, check the following: