Introduction

Configuration on Azure side

Configuration on Sisense side

Introduction

This article explains how to set up SAML 2.0 integration between Sisense and Azure AD.
For more information about SSO in Sisense see

• Introduction to SSO
• SSO via SAML 2.0

Configuration on Azure side

1. Log in to your Azure account.
2. Expand the left-hand menu:
   
3. Go to Azure Active Directory:
   
   
4. Select Enterprise applications:
   
   
5. Under the All Applications section, select New application:
   
   
6. Create your own application for ‘Integrate any other application you don’t find in the gallery’ purpose, name it Sisense:
   
   
7. Under Overview -> Assign users and groups, configure access permissions for your SSO integration. Once configured, go back to Overview and switch to Set up single sign-on:
   
   
8. Select SAML type of the SSO:
   
   
9. Edit Basic SAML Configuration to configure
   • Identifier (Entity ID) = Sisense,
   • Reply URL (Assertion Consumer Service URL) = https://my.sisense.com/api/v1/authentication/login_saml_callback.
     
     Once saved, go to Edit User Attributes and claims.
10. Use Add New Claim to add the following attributes:
    
    

    Claim Name	Namespace	Source	Source attribute
    User.FirstName	Leave it empty	Attribute	user.givenname
    User.LastName	Leave it empty	Attribute	user.surname
    User.email	Leave it empty	Attribute	user.mail

11. Optional. Add a New Group Claim as per screenshot (you need to have synchronization with Microsoft Active Directory to synchronize groups):
    
    
12. Return back to the Single Sign-On page and copy the following parameters:
    
    

Configuration on Sisense side

1. Go to Admin tab -> Single-Sign On.
2. Select SAML, turn the toggle on. Use parameters from Step 12 above for
   • Remote Login URL = Login URL
   • Remote Logout URL = Logout URL
   • Public X.509 Certificate = Content of Certificate (Base 64) file (you can open it with a text editor).