Skip to main content

Bel ons op: +31 (0)85 303 3676

Single Sign On (SSO) configuration manual

Support | ValidSign
  • Updated

Introduction

This is the guide for configuring Single Sign-On (SSO) for your organization. This manual provides instructions for setting up the new SSO module of ValidSign, allowing you to log into the application, the mobile app, and the Word and Google Drive add-in. ValidSign also offers an SSO configuration for SignerSSO, which makes it possible to use SSO during the signing of documents. Follow the next guide to set this up: Guide for Setting up SignerSSO.

Single Sign-On configuration with Microsoft EntraID (AzureAD)

This manual consists of several steps. The first step is setting up the Azure App:

  1. Log in to your AzureAD tenant as a global administrator;
  2. Click on 'Microsoft Entra ID' in the left menu;
  3. Then click on 'Enterprise Applications';
  4. Click the 'New application' button at the top;
  5. Click the button 'Create your own application' at the top again;
  6. Enter the name of the app, for example, 'ValidSign', so that you can easily find it later;
  7. Choose the option 'Integrate any other application you don’t find in the gallery (Non-gallery)' and click on 'Create';
  8. You will now be on the overview page of our app, then click on 'Single sign-on' and choose 'SAML';
  9. Click on the 'Edit' button in the 'Basic SAML Configuration' and fill in the following information:
    1. Identifier (Entity ID)
      Production (my.validsign.eu): urn:sso:mw:saml:my:ValidSign:eu
      Acceptance (try.validsign.eu): urn:sso:mw:saml:try:ValidSign:eu
    2. Reply URL (Assertion Consumer Service URL)
      Production (my.validsign.eu): https://my.validsign.eu/ssonew/saml/SSO
      Acceptance (try.validsign.eu): https://try.validsign.eu/ssonew/saml/SSO
    3. Sign on URL (optional)
      Production (my.validsign.eu): https://my.validsign.eu/ssonew/saml/login/alias/ValidSign?ENTITY_ID_OF_YOUR_AZURE_AD_TENANT
      Acceptance (try.validsign.eu): https://try.validsign.eu/ssonew/saml/login/alias/ValidSign?ENTITY_ID_OF_YOUR_AZURE_AD_TENANT
      You can find the Entity ID (ENTITY_ID_OF_YOUR_AZURE_AD_TENANT) of your tenant by clicking on 'Microsoft Entra ID' in the left menu and then 'Enterprise Applications', search for the app you've just created and open it. Go to 'Single sign-on' and scroll down. Copy the value of the field 'Microsoft Entra Identifier' under 'Set up ValidSign' and copy the 'Tenant ID'. Replace the text 'ENTITY_ID_OF_YOUR_AZURE_AD_TENANT' with the recently copied 'Tenant ID' in the 'Sign-on URL';
    4. Logout Url (optional)
      Production (my.validsign.eu): https://my.validsign.eu/saml/SingleLogout
      Acceptance (try.validsign.eu): https://try.validsign.eu/saml/SingleLogout
    5. Then click on 'Save' at the top;

  10. Next, click on 'Edit' under 'Attributes & Claims' and fill in the following information:

    1. First, delete all the default added 'Additional claims' that start with 'http://schemas.xmlsoap.org/' by clicking on the three dots and selecting 'Delete';

    2. Next, click on 'Add new claim', enter 'email' as the 'Name' and select 'user.mail' as the 'Source attribute'. Then click 'Save';

    3. Next, click on 'Add new claim', enter 'firstname' as the 'Name' and select 'user.givenname' as the 'Source attribute'. Then click 'Save';

    4. Next, click on 'Add new claim', enter 'lastname' as the 'Name' and select 'user.surname' as the 'Source attribute'. Then click 'Save'. The claim configuration will look as follows;

  11. Then, send the 'Metadata URL' of the app to our service desk. You can find this by navigating to this app and going to 'Single sign-on', then scroll down and copy the value of the field 'App Federation Metadata Url' under the 'SAML Certificates' tab;

  12. The setup of the Azure app is thereby completed on your side. Now we can proceed to finalize the configuration for you, and you will receive feedback when the Single Sign-On application is ready for use.