Aware - Azure SAML 2.0 SSO

This article contains information on setting up a new SAML SSO app for Aware in Azure, including step-by-step instructions and details on providing required information like the certificate, login URL, and logout URL to complete the integration.

The customer will need to provide three pieces of information to their Customer Success Manager to complete the SSO integration for Aware:

• Certificate file in .pem format
• Login URL
• Logout URL

1. Navigate to Azure Active Directory dashboard in Azure Portal. Select Enterprise application.
2. Select New application.

3. Select create your own application.

4. Create your own application screen:

• Enter a name for your application.

  Ensure you pick a unique name for your app, not a generic one (e.g. AwareSSO or AzureSSO). This makes it easier to find in the future, and reduce issues that could arise due to multiple use of the same app name.

  • Select Integrate any other application you don't find in the gallery (Non-gallery).
  • Click Create.

5. On the newly created application screen, select Single sign-on.

6. Basic SAML Configuration, select Edit.

7. Enter Identifier (Entity ID) & Reply URL (Assertion Consumer Service URL).

• Add identifier – urn:auth0:wiretap-prod:YourDomainNameSingleWord

YourDomainNameSingleWord value is usually your company email domain without .com. For example, our company domain "awarehq.com" the value will be "awarehq" (ex. urn:auth0:wiretap-prod:awarehq). Check with your Customer Success Manager if you are unsure about what value you should use here.

• Mark as Default.
• Add Reply URL - https://wiretap-prod.auth0.com/login/callback.

8. SAML Signing Certificate * Provide downloaded certificate to Aware CSM.

• Select Edit
  • Click (…) for the Active Certificate.
  • Select PEM certificate download (Remember the download location).

9. Login URL and Logout URL * Provide these values to Aware CSM.

• Copy Login URL value.
• Copy Logout URL value.

Renewing an Expired SAML Certificate

If your SAML certificate expires, follow these steps to renew it:

1. In Office 365, navigate to your SSO enterprise App, then go to Single Sign-on.
2. Under Section 3 SAML Certs, click the Edit button.
3. Click New Certificate and generate a new certificate.
4. Save the new certificate.
5. Use the ellipsis (...) next to the newly created inactive certificate to make it active.

The old certificate will automatically move to an inactive state.