Microsoft Entra ID

This guide covers IdP-initiated login only. For SP-initiated login, follow the generic SAML setup and no provider-specific configuration is required.

Creating an Enterprise Application

1. In Microsoft Entra ID, go to Enterprise applications > New application.
2. Search for SAML 2.0 or select Create your own application > Integrate any other application you don't find in the gallery > SAML-based sign-on.
3. Name the application (for example, Deque Axe).

Basic SAML Configuration

1. In the application, go to Single sign-on > SAML.
2. In the Basic SAML Configuration section, enter:
   • Identifier (Entity ID): The Entity ID value from your Deque metadata (the one ending in /clients/<client name>, not the one ending in /endpoint)
   • Reply URL (Assertion Consumer Service URL): The same Entity ID value

Attributes and Claims

Default attributes are acceptable. Deque requires email address, and will accept first and last name if present. If you want to verify that names are configured:

1. Go to Attributes & Claims.
2. The default claims should include:
   • http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress for email
   • http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname for first name
   • http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname for last name

These are the defaults and do not need to be changed.

Sending Metadata to Deque

1. Go to Single sign-on > SAML > SAML Signing Certificate.
2. Select Metadata URL or Download.
3. Send the metadata URL or downloaded XML file to helpdesk@deque.com.

Assigning Users

1. Go to Users and groups.
2. Assign the users and groups who should have access.

Testing and Publishing

1. Go to Single sign-on > SAML.
2. Go back to SAML Signing Certificate and select Test.
3. You should be prompted to sign in. Authenticate using your identity provider credentials.
4. Confirm you are redirected to Deque and arrive in the product.
5. Confirm your name and email address are correct on your Deque profile.
6. Go to Properties and set the application to Yes for Assignment required.

Your IdP-Initiated Start URL

After testing completes, send this URL to Deque:

1. In the application, go to Properties.
2. Under User access URL, copy the URL.