Skip to main content

Connect Molequle to Microsoft Entra ID (SAML)

Connect Molequle to Microsoft's Entra ID using the SAML protocol.

Updated over 7 months ago

Register an enterprise app with Entra ID

To register a SAML enterprise app with Entra ID, see Microsoft's Quickstart: Add an enterprise application.

Alternatively, you can "Create your own application" in Entra ID and select "Integrate any other application you don't find in the gallery (Non-gallery)".

With the enterprise app being created in Entra ID:

  1. Set up Single Sign-On for this app by clicking on "Single Sign-On" under "Manage" on the left side.

  2. On the Single Sign-On page, click "SAML" when asked to choose a Single Sign-On method.

Basic SAML configuration

On the SAML configuration page within your enterprise app:

  1. Click Edit inside the "Basic SAML Configuration" step.

  2. Click "Add Identifier" and set the "Identifier (Entity ID)" to urn:auth0:molequle:CONNECTION_ID. CONNECTION_ID will be provided by Molequle support at a later step

  3. Click "Add reply URL" and set the "Reply URL (Assertion Consumer Service URL)" to https://id.molequle.io/login/callback?connection=CONNECTION_ID. CONNECTION_ID will be provided by Molequle support at a later step.

  4. Click Save.

Attributes and claims

Leave the default mapping which should match the following attributes and claims.

LDAP Attribute

Outgoing Claim Type

E-Mail-Addresses

E-Mail Address

Display-Name

Name

User-Principal-Name

Name ID

Given-Name

Given Name

Surname

Surname

The Name ID outgoing claim should always be present to ensure correct session handling. We strongly recommend adding all of the claims listed above, especially E-Mail Address, since they are the ones most commonly used.

SAML certificates

In the SAML certificates section:

  1. Export the token signing certificate from the SAML certificates section.

  2. Optional: If Molequle should sign SAML authentication requests, upload the Molequle signing certificate as PEM or CER and click Save. Otherwise, leave empty.

Next Steps

Send the following information to Molequle support to finish the Single Sign-On setup:

  • Signing Certificate

  • Sign-In and Sign-Out URLs, which can be found in the section "Set up Test".

Molequle support will send over the CONNECTION_ID mentioned above which needs to be replaced in the Basic SAML configuration section.

Related Articles
Connect Molequle to ADFS (SAML or WS-Fed)
Connect Molequle to Microsoft Entra ID (OIDC)
Did this answer your question?