Microsoft Azure AD

This document provides a step-by-step guide for configuring the Single Sign-On authentication method for Microsoft Azure AD accounts.

Access the Azure Portal https://portal.azure.com/
This documentation was written using Azure in English. If your Azure language settings differ, consider changing them to English to make it easier to follow the steps.

Creating a Deskbee Application in the Azure Portal

Click on Azure Active Directory.

Click on Enterprise Applications.

Click on Create Your Own Application.

Enter a name for the application and select Integrate any other application you don’t find in the gallery (Non-gallery).

Assigning Users and Groups to the Application

Assign the users or groups who will have access to the application (at least your account or another one for testing purposes).

After assigning users, click on the Single sign-on menu to start the configuration.

Configuring Authentication

Access the Deskbee Dashboard (https://admin.deskbee.app/companyname) using the provided credentials, as you will need to exchange URLs and certificates between the Identity Provider (Azure AD) and the Service Provider (Deskbee).

Access the Deskbee Dashboard (https://admin.deskbee.app/companyname)

In the Deskbee Dashboard, go to Integrations / Authentication.

Access to Integrations / Authentication is restricted to IT and Super User profiles. Check with the administrator if your account is part of one of these profiles.

Enable SAML SSO Authentication.

Click on the three dots, then click the Add New SSO Connection button.

Provide a name for your connection and text displayed in the Connection Button.

Copy the Deskbee configuration URLs

In the Deskbee Dashboard’s Basic SAML Configuration, copy the URLs from your dashboard. These URLs should be added to the Azure Portal.

The image below is for illustration purposes only. Check your specific Deskbee account’s URLs in the Deskbee Dashboard.

In the Azure Portal, go to Single sign-on > SAML.

The SAML configuration details will be displayed. In Basic SAML Configuration (1), click Edit.

Return to the Deskbee Dashboard, copy the available URLs in Basic SAML Configuration, and paste them into the corresponding fields in the Azure Portal’s Basic SAML Configuration.

Deskbee Dashboard URLs vs. Azure Portal URLs:

Deskbee Dashboard

Azure Portal

Identifier (Entity ID)

ACS Response URL (Consumer Service Declaration URL)

Reply URL (Assertion Consumer Service URL)

Click Save.
Configuring Attributes (Claims), In User Attributes & Claims (2), click Edit.

In the Unique User Identifier (Name ID) claim, click on Value.

Select "Persistent" under "Choose name identifier format".

Set Source attribute to user.mail and save the configuration and close it.

Ensure the Additional claims include the following:

Claim name

Value

http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress

user.mail

http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name

user.displayname

Additional attributes/claims for Azure integration can be ignored.

Check Claims: This is the final configuration for attributes/claims required for Deskbee.

In the Azure Portal, download the certificate in Base64 format from SAML Signing Certificate (3).

Return to the Deskbee Dashboard. Click on the SAML Authentication Certificate (Base64) field, choose the downloaded certificate, and upload it.

Configuring Azure URLs in Deskbee

In the Azure Portal under Login URL and Azure AD Identifier (4), copy these URLs and add them to the Deskbee Dashboard in the corresponding fields:

Check below the fields of the Azure Portal URLs and which field corresponds to the Deskbee Panel.

Azure Portal Field

Deskbee Dashboard Field

Microsoft Entra Identifier

Identity ID

Logout URL

Save the configuration in the Deskbee Dashboard by clicking Save.
Access your Deskbee app at companyname.deskbee.app and click the login button you named.
Enjoy! 😁