Set Up Single Sign-On with Microsoft Entra (Formerly Azure AD)

Security:

Administrator
access on Peakon.

Necessary access on Microsoft Entra.

If your employees have email addresses from multiple domains, you need to specify them on your organization's account for single sign-on (SSO) to work. Contact Customer Care for assistance.

You can set up SSO so your employees can sign into Peakon using their Microsoft Entra credentials.

Enable SSO in Peakon.

Go to

Administration

Integrations

Single Sign-On

Click

Connect

. The page will now display SSO configuration fields. You will reference or add information to this page in steps 4-6.

Add Peakon to your list of managed SaaS apps from the gallery in Microsoft Entra.

Select

Users and groups

in Manage section of the Peakon app in Microsoft Entra and ensure that the correct population for testing and using SSO is selected.

After adding the Peakon app, select

Single Sign-On

in Microsoft Entra.

Select

SAML

as the SSO method in Microsoft Entra, go to the

Basic SAML Configuration

section and enter the following values:

Enter the values from the

Entry ID

field in Peakon into the

Identifier

field in Microsoft Entra.

Enter the values from the

Reply URL (ACS)

field in Peakon into the

Reply URL

field in Microsoft Entra.

Select

Edit

on the

Token signing certificate

and ensure the

Signing Option

is set to

Sign SAML response and assertion

Download

Certificate (Base64)

from the

SAML Signing Certificate

section in Microsoft Entra and enter it into the

Certificate

field on Peakon.

From the

Set up Peakon

section in Microsoft Entra, enter these values into Peakon:

into the

SSO Log-in URL

field on Peakon.

Logout URL

into the

SSO Log-out URL (Optional)

field on Peakon.

Test SSO:

Sign out of Peakon, then sign back in using your work email address and continue.

Peakon should redirect you to the SSO page in Microsoft Entra, then redirect back to Peakon.

Concept: Single Sign-On