> For the complete documentation index, see [llms.txt](https://docs.cyberawaresecurity.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.cyberawaresecurity.com/admin-portal/sso-single-sign-on.md).
# SSO (Single Sign-on)
## SSO (Single Sign-on) Guide
In this article, we explain the process of how an admin can set up the **SSO (Single Sign-on)** for their student (**/learn**) portal. This will enable users to sign into the portal application using their **Azure Active Directory** credentials.
**1.** Access your Azure portal and navigate to **Azure Active Directory.**
Please be advised that in order to enable SSO for users, they should exist in both the **cyberawaresecurity** and **Azure** platform.
**2.** From the menu on the left, go to **Enterprise applications.**
**3.** On the new directory, click on **New application.**
You should get the following output:
**4.** Select **Create your own application:**
**5.** Enter a name for your application. In this instance we will use **Examine** for demonstration purposes:
**6.** Make sure that the last option which states **Integrate any other application you don’t find in the gallery (Non-gallery)** is selected and click on **Create:**
It will direct you to **Browse Azure AD Gallery.** From there, you will be able to see a **Getting Started** section:
**7.** Click on the **Get started** option of the second step indicating **Set up single sign on.**
**8.** Choose the **SAML** option from the new prompt:
We will demonstrate **two ways** in which we can configure the SSO.
**9.** But before we do that, let's see how we can add **Users and groups:**
**10.** Click on the **Add user/group** option:
You will be prompted with the following:
**11.** From there, select the **None Selected** option to view the available **Users and groups:**
**12.** For this example, we will choose 1 group and 1 user and click on **Select:**
**13.** Click on **Assign** to finalise the process.
**14.** As we can see, the **Application assignment succeeded!**
**15.** Firstly, we will show the way where we **manually** configure the **Basic SAML Configuration.** To do that, click on the **Edit** button:
You should enter the links required:
**16.** The **Entity ID** is the actual URL of the portal.
**17.** The **Reply URL** is the URL of the portal with a **/saml/acs** added at the end.
**18.** The **Sign on URL** or the **student portal link,** is essentially the URL of the portal with a **/learn** at the end.
**19.** Finally, enter the **Logout Url** which is the **portal’s URL** with **/saml/slo** added at the end of the link.
**20.** Let’s make an example:
**21.** At the **Entity ID,** click on the **trash can** button next to the **default URL** to **delete** it:
This will automatically set our link as **Default:**
**22.** Click on **Save** to proceed.
**23.** As we can see, the single sign-on configuration was saved successfully!
**24.** As a next step, you will have to navigate back to the **Set up Single Sign-On with SAML:**
**25.** Moreover, in a new tab or window, open and log in to your **cyberawaresecurity** platform branch. This is essentially your **Entity ID URL,** so for this demonstration we will be using the **examine:**
**26.** To enable Single Sign-on, scroll down and click on the **SSO (Single Sign-on)** section:
**27.** From there, click on the button right next to **Enable Single Sign-on.**
You should get the following output:
**28.** We will take the information required from **Azure.** Switch back to your **Set up Single Sign-On with SAML** window:
**29.** Scroll down to the **3rd point** called **SAML Signing Certificate** and **copy** the **App Federation Metadata Url.** To do that, **click** on the indicated button of the following screenshot:
This will be your **IDP Metadata URL:**
**30.** Let’s use our **IDP Metadata URL** for demonstration:
For the **Attributes & Claims** records of the **SSO Configuration,** you will have to navigate to the **User Attributes & Claims.**
**31.** From the **Set up Single Sign-On with SAML** window, find the **2nd point** called **User Attributes & Claims** and click on the **Edit** button:
You should get the following output:
**32.** Before we start copying everything to the SSO Configuration, there is a change we must apply. Click on the **user.mail** attribute so we can edit:
**33.** As guided in the **Required claim,** let’s **replace** the **user.mail** with **user.userprincipalname:**
**34.** Click on **Save** to apply the changes:
**35.** As we can see, the value has been replaced successfully!
**36.** Finally, let’s enter the rest of the attributes, starting with **Unique ID.** This would be the suggested URL, but we replace the **/emailaddress** with **/mail** at the end of the link.
In other words:
**37.** The rest of the details we can just copy and paste accordingly:
**38.** Click on the **Save** button:
**39.** As we can see, the SSO configuration was updated successfully!
**40.** Let’s also demonstrate the **alternative** way to configure SSO where the **Basic SAML Configuration** is configured **automatically.** To do that, complete the **first 8 steps.** You should reach the **Set up Single Sign-On with SAML** window:
**41.** Select the **Edit** button of the **Basic SAML Configuration:**
You should enter the links required:
**42.** The links are the same as before, so let’s enter them and save the changes!
**43.** As we can see, the **single sign-on configuration** was saved successfully!
**44.** Finally, complete the rest of the steps (**19-33**) so the SSO configuration is in place, and you reach the confirmation prompt:
**45.** From there, click on the **Download Metadata XML** button:
You should get the following file:
**46.** To conclude the process, switch back to your **Set up Single Sign-On with SAML** window and click on the **Upload metadata file** option:
**47.** Enter the **metadata** file and click on the **Add** button:
**48.** The **SAML** file will be uploaded as expected and the **Basic SAML Configuration** prompt will pop up:
**49.** Click on the **Save** button to apply the changes:
**50.** As expected, the configuration was saved successfully!
**51.** Close the **Basic SAML Configuration** prompt to view the added details:
**52.** You can now go ahead and login as a user in the student (**/learn**) portal. Since SSO has been enabled, you will be redirected to the Microsoft login screen:
