SAML SSO Setup for Microsoft Azure Active Directory

With SAML SSO for Microsoft Azure Active Directory, your users will be able to login with their Microsoft login, simplifying and securing their login to the Localize dashboard.

Click here for a general overview of the SAML SSO setup and login processes.

Setting up SAML SSO

The setup is similar for different IdPs. Below we provide the detailed steps for setting up a SAML SSO application using Microsoft Azure Active Directory.

Step 1: Enable SAML SSO in Localize

First you'll need to enable the use of SAML SSO across your Localize Organization.

1. Navigate to the Settings page under the Manage Organization menu item.
2. Check the box next to Enable SAML SSO

This will display important information for Localize as the Service Provider (SP). You'll use this info later in the process.

Step 2: Create your SAML Application in Microsoft Azure Active Directory

Next you'll need to use the information provided by Localize in the SSO Settings panel to create and set up your SAML application in Microsoft Azure Active Directory.

1. Open a new browser tab and login to Microsoft Azure
2. Click the Manage Azure Active Directory option
3. Click Create a tenant
   a. By default Azure Active Directory will be selected
4. Click Next configuration
5. Enter Organization name and Initial domain name
6. Click Next
   a. A Validation Passed message will appear on the final screen.
7. Click Create.
   a. It will take a few minutes to create the tenant.
8. In the side menu of the tenant you just created, click Enterprise application.
9. Click + New application near the top of the screen.
10. Select the Non-gallery application option
11. Type a name for the application and click Add
12. In the screen that appears, select the Set up single sign on option
13. Select SAML
14. Click Edit in the Basic SAML Configuration panel.
15. In the Basic SAML Configuration popup, enter the following information by copying-and-pasting from the Localize tab.

18. Click Edit in the User Attributes & Claims panel.
19. Choose Name ID as the Claim name and user.email for Value
20. Click Save. Remove or keep other additional claims.
21. Click the Download button for the Federation Metadata XML in the SAML Signing Certificate panel and name it metadata.xml.
22. Copy the Login URL from the Set up {Application_Name} panel.

Step 3: Enter the IdP Details in Localize

1. Switch to the Localize browser tab
2. Paste the Login URL endpoint into the IdP URL field.
3. Open the metadata.xml file that you downloaded, copy the contents, and paste them into the Metadata text box.
4. Click Save

Step 4: Finish your SAML App Setup

1. Switch back to the Microsoft Azure browser tab.
2. Click Users and groups in the side menu.
3. Click + Add user near the top of the screen.
4. Select and assign all relevant users.
   a. Make sure that the email addresses your users use to sign in to Localize match the email addresses they use to sign into Microsoft Azure.