Skip to main content

Azure SSO

Paul Holder avatar
Written by Paul Holder
Updated over 5 months ago

SSO is an add-on feature with OnRamp. Please contact Customer Success or support@onramp.us for more information.

  1. Navigate to SSO Settings

Profile - OnRamp 2022-12-12 at 6.50.19 PM

2. Toggle on SAML and get required setup data

Toggle on “Enforce SAML SSO” and note the “Assertion Consumer Service URL” and “SAML Entity ID”. You’ll need those in a moment (don’t exit out of this page yet):

Profile - OnRamp 2022-12-12 at 6.52.32 PM

3. Create your new Enterprise Application

Navigate to your Azure Active Directory, Click “Enterprise Applications” in the sidebar on the right, and then click the “New Application” button:

4. Create a new application using certain settings

In the screen that comes now, click the button that says “Create your own application”, then in the popover screen, when it asks for a name, type “OnRamp SAML SSO” or whatever makes sense for your organization, then choose the option that says “Integrate any other application you don’t find in the gallery (Non-gallery)”. Finally, click create:

5. Configure SAML SSO in your enterprise application

In the screen that follows, click the “Get Started” link in the “Set up single sign on” box, then choose the “SAML” option for SSO option in the following screen:

6. Enter the OnRamp SAML configuration into the application

Now, you’re on the configuration page. In the box marked Basic SAML Configuration, click the “Edit” button:

Then, take the Entity ID and Assertion Consumer Service URLs you got from the OnRamp application earlier, and add them into the configuration, using the links shown in the screenshot:

Finally, hit save:

7. Finish setting up the SAML connection in OnRamp

First, get the App Federation Metadata Url by going to the section labeled SAML Signing Certificate and copying the URL:

Go back to OnRamp and enter the URL you just copied into the field marked “SAML Metadata URL” and click “Enable SAML SSO”:

Profile - OnRamp 2022-12-12 at 6.52.32 PM

After a minute, you should get a notification in the top right corner of your application that says something along the lines of “SAML SSO Enabled”.

NOTE: Users must log in to their account via app.onramp.us. Logging in through Azure directly (IdP initiated login) is not supported.

Congrats, SSO is now enabled in OnRamp. Please add any users you wish to use this connection to your application in Azure and to OnRamp.

Did this answer your question?