Single Sign-On (SS0)
      Back to home
      1. Mursion Support
      2. Tech Implementation
      3. Single Sign-On (SS0)

      Configuring SAML with Microsoft Entra ID

      Supported Features
      The Mursion and Microsoft Entra ID SAML 2.0 integration currently supports the following features:

      • SP-initiated SSO

      • JIT (Just In Time) Provisioning

      Configuration Steps

      Add Non-Gallery Application in Microsoft Entra ID

      1. In the Microsoft Entra admin center, navigate to Identity > Applications > Enterprise applications.

      2. Click New application.

      3. Select Create your own application.

      4. Enter Mursion as the name of the application and choose Integrate any other application you don’t find in the gallery (Non-gallery).

      5. Click Create.

      6. You will then be re-directed to the newly created application. You can (upload the Mursion logo as the application logo (right-click and save image as .png).
        mursion_logo_primary_fullcolor_std_1000pxw (3)

      7. Once the integration is complete, you will need to add or assign users within Entra, or a group of users, to the app to give them access to the Mursion portal.  

         

      Configure Single Sign-On (SSO)

      1. In the Manage section of the navigation bar, select Single sign-on.

      2. Choose SAML as the single sign-on method.

      3. Click Upload metadata file to upload Mursion's metadata file. You can generate this yourself following the steps in the 'Create SSO Configuration in Mursion Portal' section below or a Mursion integration specialist can generate it for you and share. Reach out to your Engagement Manager for assistance. 

      4. Under Attributes & Claims ensure you are providing email, first name, and last name claim values. You may also opt to share additional claim values for location, phone number, department, or Mursion team assignments if you would like. 

      5. Under step 3, download the Metadata XML for your newly created application.

      Create SSO Configuration in Mursion Portal

      Note: Mursion will assist with this process. Reach out to your Engagement Manager to get started and a Mursion integration specialist will be assigned to assist you.

      1. Open a new browser tab and sign in to Mursion Portal.

      2. Navigate to Settings > SSO.

      3. Click Create SSO Configuration.

      4. In the New SSO Configuration dialog, enter the following:

        • Protocol: SAML 2.0

        • Configuration Name: Enter a descriptive name of your choice.

        • Single Sign-On Service Endpoint: Copy and paste the Login URL from the Microsoft Entra ID Mursion application setup.

        • Logout Endpoint: Copy and paste the Logout URL from the Microsoft Entra ID Mursion application setup.

        • Entity ID: Copy and paste the Microsoft Entra Identifier from the Microsoft Entra ID Mursion application setup.

        • X.509 Certificate: Copy and paste the PEM-formatted text of the SAML Signing certificate downloaded from Microsoft Entra ID. Ensure you include the headers -----BEGIN CERTIFICATE----- and -----END CERTIFICATE-----.

        • Email Claim Name: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress

        • First Name Claim Name: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname

        • Last Name Claim Name: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname

        • Single Logout Enabled: (Optional) Check this option to allow Microsoft Entra ID to terminate a user’s session when they log out of Mursion Portal.

        • Team Claim Name: (Optional) Enter the attribute name that specifies team assignment.

        • Team Mapping: If using Team Claim Name, click Add to map attributes to Mursion Portal teams.

      5. Click Create SSO Configuration.

      6. Select the newly created SSO configuration and:

        • Click Download SP Metadata and save the metadata XML file.

        • Copy the SP Initiated SSO URL and save it for later steps.

       

      Testing Mursion Portal SSO

      1. Assign one or more test users to the Mursion application in Microsoft Entra ID.

      2. As a test user, click on the Mursion application to initiate SSO.

      3. If the configuration is correct, the user will be signed in to Mursion Portal and follow this flow:

        • The Mursion & User Agreement will be displayed for acceptance.

        • The User Profile page will appear to confirm profile and timezone.

        • The Calendar page will be displayed, completing the login process.