Setup Azure Active Directory with Consent Kit

Help setting up Azure Active Directory with Consent Kit SAML SSO

Note - These instructions assume you have configured a tenant in Azure AD. It may be possible to do this without a tenant but this is outside the scope of this guide.

Setup your SAML integration in Azure AD

1. In the Azure portal, go to Azure Active Directory > Enterprise applications > New application
2. Select Create your own application
3. Input “Consent Kit” (Or what makes sense) as the name of your app and select Integrate any other application you don’t find in the gallery (Non-gallery). Click Create
4. Select Single sign-on from the left hand menu
5. Select SAML then edit the Basic SAML Configuration section
6. In the Basic SAML Configuration section, enter the following values:
   • Identifier (Entity ID): https://app.consentkit.com/users/saml/metadata
   • Reply URL (Assertion Consumer Service URL): https://app.consentkit.com/users/saml/auth
   • click Save

Get the settings from Azure AD

On the same screen as above:

1. Download the Certificate (Raw) file
2. In section number 4 make a note of the Login URL and the Azure AD Identifier

Once that is setup then we are one step away from being done.

Enabling SAML SSO within Consent Kit

Option 1 - Enabling within Consent Kit yourself

Once you have the above information, you can enable SAML SSO within Consent Kit by going to Manage team in the top right menu and clicking on the settings tab.

Once you have clicked on the settings tab, you will be able to see the SAML SSO settings. You will need to enter the following information:

• IdP Entity ID: This is your Azure AD Identifier
• Target URL: This is your Login URL
• Certificate: The downloaded Certificate. You will need to open the file and get the text content of the file to be able to paste it into the form.

Option 2 - Sending the instructions to your IT team

Go to Manage team in the top right menu and clicking on the settings tab then click on send the instructions to a team member or colleague.

This will give you a customisable email template that you can send to your IT team and will contain the information that they need to enable SAML SSO for you.