Microsoft Entra ID SAML SSO

Configure SAML single sign-on with Microsoft Entra ID, then send the metadata URL to We360 Support for activation.

Use this guide to configure Microsoft Entra ID for We360 SAML SSO.

We360 Support must activate SSO after your Entra setup. Send Support the App Federation Metadata URL after step 4. SSO will not work until Support confirms activation. Do not test before that confirmation.

1

Create the enterprise application

1. In the Azure portal, open Microsoft Entra ID.
2. Go to Enterprise applications → New application.
3. Select Create your own application.
4. Enter a name, such as We360-SAML-SSO.
5. Select Integrate any other application you don't find in the gallery (Non-gallery).
6. Select Create.

2

Select SAML sign-on

1. Open the new enterprise application.
2. Select Single sign-on.
3. Select SAML.

3

Configure SAML values

In Basic SAML Configuration, select Edit. Enter these values:

• Identifier (Entity ID): https://auth.in.we360.ai/realms/ind-prod
• Reply URL (ACS URL): https://auth.in.we360.ai/realms/ind-prod/broker/<domain>-azure-ad/endpoint

Replace <domain> with your We360 portal subdomain.

For https://mydomain.we360.ai, use:

https://auth.in.we360.ai/realms/ind-prod/broker/mydomain-azure-ad/endpoint

4

Map the user identifier

In Attributes & Claims, map Unique User Identifier to user.mail.

5

Send metadata to We360 Support

1. Open SAML Certificates.
2. Copy the App Federation Metadata URL.
3. Send that URL to We360 Support.

Support uses this URL to complete the We360-side SSO configuration. Wait for their confirmation before testing.

6

Assign users or groups

Go to Users and groups → Add user/group. Assign test users or a security group.

Users cannot sign in unless they are assigned to the application.

7

Test after activation

After Support confirms activation, open your We360 portal URL and start sign-in. You should be redirected to Microsoft Entra ID.