Azure Active Directory SSO

Microsoft Azure SSO Configuration

1. Go to Microsoft Azure manage portal. On the left menu, click Azure Active Directory>>Enterprise applications. 
2. Once redirected click the New application button. 
3.  From this screen, search AlertOps from the gallery. Select the AlertOps Application from the search results. On the right, provide a name for the application and click the Add button at the bottom of the screen.
4. From the application page, click Single sign-on from the menu. Select SAML from the SSO methods displayed.
5. In the resultant configurations screen, click the pencil edit icon on Basic SAML Configuration and enter and save the following based on your AlertOps client URL:
   • Identifier: https://app.alertops.com/yourorg
   • Reply URL: https://api.alertops.com/api/v2/saml/yourorg
   • Logout Url: https://app.alertops.com/yourorg  
6. In SAML Certificates, copy the App Federation Metadata Url and Download Certificate (Base64). These will be used later to configure the SSO settings in AlertOps.
7. From the menu, click Users and Groups and click the Add User button. From here you will select and assign users.

AlertOps SSO Configuration

1. From the AlertOps web application, navigate to your User Account settings from the top right-hand side of the screen and click Account Settings. 
2. Click UPDATE SSO and check the Use Single Sign On (SSO)box and enter and save the following enter and save the following based on your AlertOps client URL:
   • Issue URL: https://app.alertops.com/yourorg (the Identifier used in Azure Manage) 
   • SAML endpoint URL:
     • Copy the App Federation Metadata Url and edit like the image below. Use the second link for the SAML endpoint URL.
   • SLO endpoint URL:
     • Copy the App Federation Metadata Url and edit like the image below. Use the second link for the SLO endpoint URL. 
   • SAML Signature Algorithm: select "SHA256" from the dropdown menu. 
   • X.509 Certificate: Copy and paste the Certificate (Base64) 
   • Enable Allow username/password login to allow user to login without SS.
3. Click the green checkmark to save the SSO settings.