How to - Azure (Entra) SAML SSO Configuration

IMPORTANT: Please generate a ticket to request SSO. This configuration will require setup by your IT department and Kiuey technical team.

Entra (Azure) Configuration Steps

1. Go to your Entra Portal and navigate to Enterprise Applications.

2. Locate and select the Kiuey/PPAP Manager application.
If it’s not available, please create a one (go to step 2.1, go to Step 3 if Application already created). 

    2.1 Click New Application

    2.2 Click Create your own application

   2.3 Add Application Name (Example: Kiuey-PPAP Manager) Then select Integrate anyother application you don't find in the gallery (Non-gallery), Click Create.

3. Once in the Kiuey Application page, go to the sidebar, then to Manage > Click on Single sign-on, then select SAML:

4. Configure SAML:

Basic SAML Configuration
Click the Edit icon and add the following two required fields.

• Identifier (Entity ID): Name as desired (example: KiueySSO)

• Reply URL (Assertion Consumer Service URL):
  https://api.kiuey.com/saml/callback?sub=COMPANYDOMAIN

Attributes & Claims
In this section, the key attribute is username → user.mail.
(Refer to the example image, depending on your setup, this might appear as user.mail or user.email.)

SAML Certificates
Download the following from this section:

• Metadata XML

• Certificate (download both available files)

5. Retrieve the User Access URL:
Go to the Enterprose apps > Kiuey application > Properties.

Copy the User Access URL.

6. Send the copied User Access URL plus the three downloaded files (Metadata + 2 Certificates) to support@kiuey.com 

7. Wait for Kiuey to configure the information. A Kiuey agent will provide further instructions and advise when testing can begin.