SAML SSO Setup for Microsoft Azure Active Directory

Allow your users to login to Localize using Microsoft Azure Active Directory as the Identity Provider

With SAML SSO for Microsoft Azure Active Directory, your users will be able to login with their Microsoft login, simplifying and securing their login to the Localize dashboard.

Click here for a general overview of the SAML SSO setup and login processes.

Setting up SAML SSO

The setup is similar for different IdPs. Below we provide the detailed steps for setting up a SAML SSO application using Microsoft Azure Active Directory.

Step 1: Enable SAML SSO in Localize

First you'll need to enable the use of SAML SSO across your Localize Organization.

  1. Navigate to the Settings page under the Manage Organization menu item.
  2. Check the box next to Enable SAML SSO

This will display important information for Localize as the Service Provider (SP). You'll use this info later in the process.

Step 2: Create your SAML Application in Microsoft Azure Active Directory

Next you'll need to use the information provided by Localize in the SSO Settings panel to create and set up your SAML application in Microsoft Azure Active Directory.

  1. Open a new browser tab and login to Microsoft Azure
  2. Click the Manage Azure Active Directory option
  3. Click Create a tenant
    a. By default Azure Active Directory will be selected
  4. Click Next configuration
  5. Enter Organization name and Initial domain name
  6. Click Next
    a. A Validation Passed message will appear on the final screen.
  7. Click Create.
    a. It will take a few minutes to create the tenant.
  8. In the side menu of the tenant you just created, click Enterprise application.
  9. Click + New application near the top of the screen.
  10. Select the Non-gallery application option
  11. Type a name for the application and click Add
  12. In the screen that appears, select the Set up single sign on option
  13. Select SAML
  14. Click Edit in the Basic SAML Configuration panel.
  15. In the Basic SAML Configuration popup, enter the following information by copying-and-pasting from the Localize tab.
Identifier (Entity ID)Localize-SSOThe unique Localize SP entity ID.
ACS URL(Copy and paste from the Localize settings page)The Localize endpoint that's responsible for receiving and parsing your SAML assertion.
Sign on URLhttps://app.localizejs.comThe URL at Localize that starts the SAML login process.
  1. Click Edit in the User Attributes & Claims panel.
  2. Choose Name ID as the Claim name and for Value
  3. Click Save. Remove or keep other additional claims.
  4. Click the Download button for the Federation Metadata XML in the SAML Signing Certificate panel and name it metadata.xml.
  5. Copy the Login URL from the Set up {Application_Name} panel.

Step 3: Enter the IdP Details in Localize

  1. Switch to the Localize browser tab
  2. Paste the Login URL endpoint into the IdP URL field.
  3. Open the metadata.xml file that you downloaded, copy the contents, and paste them into the Metadata text box.
  4. Click Save

Step 4: Finish your SAML App Setup

  1. Switch back to the Microsoft Azure browser tab.
  2. Click Users and groups in the side menu.
  3. Click + Add user near the top of the screen.
  4. Select and assign all relevant users.
    a. Make sure that the email addresses your users use to sign in to Localize match the email addresses they use to sign into Microsoft Azure.