Steps: Configure SAML SSO Using Microsoft Entra ID

Set Up MS Entra ID

From the MS Azure portal, select
Microsoft Entra ID
.
Select
Enterprise applications
  and then
New application
.
In the search box, enter
Adaptive
. From the search results, select
Adaptive Insights
. The Adaptive insights Enterprise Application overview page displays.

Configure Microsoft Entra ID Single Sign-On

Sign in to Adaptive Planning and select
Administration
from the main menu.
Under
Users and Permissions
, click
SAML SSO Settings
.
Scroll down to the
SSO URL
section at the bottom of the page and copy the
Adaptive Planning SSO URL
. Save this URL for use at a later step.
In Microsoft Entra ID, from the Adaptive Insights Enterprise Application overview page, click
Single sign-on
.
Select
SAML
as the single sign-on method. Then, next to Basic SAML Configuration, click
Edit
.
Under
Identifier (Entity ID)
, click the
Add identifier
link and paste the Adaptive Planning SSO URL that you copied from Adaptive Planning in an earlier step.
Under
Reply URL (Assertion Consumer Service URL)
, click the
Add reply URL
link and again paste the Adaptive Planning SSO URL. Then click
Save
.
From the
SAML Certificates
section, click
Certificate (Base64)
to download and save the certificate to your computer.
From the
Set up Adaptive Insights
section, copy these values for use at a later step:
Login URL
Microsoft Entra Identifier
In Adaptive Planning, on the SAML SSO Settings page, complete these fields:
In
Identity provider name
, enter a name for your configuration.
In
Identity provider Entity ID
, paste the Microsoft Entra Identifier that you copied from MS Entra ID in an earlier step.
In
Identity provider SSO URL
, paste the Login URL that you copied from MS Entra ID in an earlier step.
Next to
Identity provider certificate
, click
Choose File
and upload the SAML certificate that you downloaded from MS Entra ID in an earlier step.
Next to
SAML user Id
, select
User's Adaptive Planning user name
.
Next to
SAML user id location
, select
User id in NameID of Subject
. For
SAML NameID format
, select
Email address
.
In the
Enable SAML
section, select
Allow SAML SSO and direct Adaptive Planning login
.
Click
Save
.

Create MS Entra ID Test User

In MS Entra ID, on the left navigation pane, click
Users
.
On the Users page, click
All users
. Then select
New user
Create new user
.
Enter the user principal name and email address. Copy the email address for use in a later step.
Enter the display name for the test user.
Next to
Password
, click
Copy to clipboard
for use in a later step.
Click
Review + Create
.

Create Adaptive Planning Test User

Sign in to Adaptive Planning as an administrator.
Navigate to
Administration
.
Click
Users.
Click
New User.
Enter the name, login, email, and password of a valid MS Entra ID user you want to provision.
Select a permission set.
Click
Submit.

Assign the MS Entra ID Test User

In MS Entra ID, on the left navigation pane, click
Enterprise applications
.
In the all applications list, select the Adaptive Insights application that you created.
On the left navigation pane, click
Users and groups
and then
Add user/group
at the top of the page.
Under
Users
, click
None Selected
. Then from the users list, select the test user.
Click
Assign
on Add Assignment.

Test the SSO (Service Provider Initiated)

Test the SSO (Identity Provider Initiated)

In MS Entra ID, on the left navigation pane, click
Properties
.
Copy the
User access URL
.
Open a new browser page, paste the User access URL into the URL bar, and press
Enter
.

SSO Into Excel Interface for Planning and OfficeConnect