How to configure Single-Sign-On between Mosaic and Azure / Entra ID

In this article you will find the necessary steps to configure a connection between Azure and Mosaic's authentication platform to establish a Single-Sign-On experience for your enterprise users using Mosaic.

If at any time there are questions or issues with the connection, please reach out to support@mosaic.pe for assistance.

Azure Configuration

1. Navigate to your Azure Admin Portal > Enterprise Applications and choose New Application, then Create your own application
2. Enter "Mosaic" as the name of the app, and choose a Non-gallery application
3. Within the "Set up single sign on" section, choose SAML
4. Within the Set up Single Sign-On with SAML, edit the Basic SAML Configuration.
5. Add an identifier under the Identifier (Entity ID) section as: 

   urn:amazon:cognito:sp:us-east-1_snwpaAR4h
   
   

6. Add a reply URL as:

   https://auth.mosaic.pe/saml2/idpresponse
   
   
   
   
   

7. Press Save to exit the Basic SAML Configuration area
   
   
8. Ensure that the givenname, surname, and emailaddress attributes are set in the Attributes & Claims section.
   
   
   
   
9. Copy the App Federation Metadata Url value from the SAML Certificates section, and email to support@mosaic.pe
   
   
   
   
   
10. In the Users & Groups section, assign access to Mosaic to the users within your organization.
    
    
    

Mosaic Configuration