This page article describes steps to be done in Azure AD to set up an authentication-only SAML SSO connection with ServiceChannel in Azure AD.
| Warning |
|---|
Creation of You can create a custom SAML SSO application is available only in Azure AD Premium. |
Creating a Custom Application
Configuring SAML SSO
| Panel |
|---|
| bgColor | #F9F9F9 |
|---|
| titleColor | #0e3367 |
|---|
| titleBGColor | #EAEAEA |
|---|
| borderStyle | none |
|---|
| title | ⦿ How to configure SAML SSO |
|---|
|
- In the Azure classic portal, on the ServiceChannelTest application configuration page, click Configure single sign-on to open the Configure Single Sign-On dialog window.
 - On the How would you like users to sign on to ServiceChannelTest page, select Microsoft Azure AD Single Sign-On, and then click Next.
 - On the Configure App Settings page, enter your ServiceChannel SAML service URL, for example,
https://st1login.servicechannel.com/saml/acs/ for the test environment, into IDENTIFIER and REPLY URL fields, and then click Next.
 - On the Configure single sign-on at ServiceChannelTest page, download your certificate and copy the URL from the ISSUER URL field. This information should be sent to ServiceChannel support to have the SAML SSO connection set properly on both sides.
 - Select Confirm that you have configured single sign-on as described above... and click Next.
 - Click Complete to finish the configuration.
|
In the Azure classic portal, on the ServiceChannelTest application configuration page, click Attributes and set the attributes.
Only nameid is required if SAML SSO is used for the user authentication only. In the case SAML SSO is used for just-in-time (or full) provisioning, additional attributes should be provided to create a new user in SC. The Role values should match the values specified in the User Role template.
Assigning users
To test your custom SAML SSO application, grant access to ServiceChannelTest to some of Azure AD users.
| Panel |
|---|
| bgColor | #F9F9F9 |
|---|
| titleColor | #0e3367 |
|---|
| titleBGColor | #EAEAEA |
|---|
| borderStyle | none |
|---|
| title | ⦿ How to grant users access to ServiceChannelTest |
|---|
|
- On the ServiceChannelTest configuration page, click Assign accounts.
 - Select test users, click Assign, and then click Yes to confirm your assignment.
|
Testing SAML SSO
If you want to test your single sign-on settings, open the Access Panel and click the ServiceChannelTest application.
Troubleshooting
If you see ServiceChannel login form, your connection is set up properly, but there is an issue with the configuration on SC side or wrong data sent in the SAML assertion. Contact SC to debug.
