Skip to main content

Set up SSO with Azure

Jan
  • Updated

Set up Single Sign-On with Microsoft Azure AD, now renamed to Microsoft Entra ID.

By using Azure SSO, your users will no longer need to remember an extra password to sign into Lattice, and you can quickly remove their access to Lattice from a centralized control panel.

Note: Because SSO configuration is a technical process, we recommend that your IT team assist with the setup. For Microsoft's detailed tutorial for setting up Azure AD SSO integration with Lattice, read Lattice Tutorial. 

Configure SSO in Azure

  1. In the Azure portal, navigate to Azure Active Directory.
  2. On the left panel, navigate to Enterprise applications > All applications > click New application. 
  3. In the Browse Azure AD Gallery section, search for Lattice > click Create. 
  4. Click Set up single sign on > SAML.
  5. In the Basic SAML Configuration, select Edit.
  6. Add the Identifier (Entity ID) and Reply URL (Assertion Consumer Service URL) with the following:
    • Entity ID: https://[subdomain].latticehq.com/sso/[subdomain]/metadata
    • ACS URL: https://[subdomain].latticehq.com/sso/[subdomain]/acs
    • [subdomain] is your Lattice subdomain. For example, if your organization's Lattice URL is https://bigco.latticehq.com, bigco would be your subdomain and your ACS URL would be: https://bigco.latticehq.com/sso/bigco/acs.

Complete Setup in Lattice

  1. While in the Azure portal, navigate back to Home > Enterprise Applications > Lattice > SAML Certificates. Download the Federation Metadata XML file. 
  2. In Lattice, navigate to Admin > Settings > Platform > Single Sign-On.
  3. (Optional) Check to Force employee login through SSO or Force admin login through SSO.
  4. Copy and paste the contents of the Metadata File. 
  5. Click Save.

Note: Make sure you are opening the Metadata file from a text editor or a note editor, opening it from another application might reformat it. 

Related articles