SSO: Configuring Microsoft Azure for use with InVision V6

Getting set up to use Microsoft's Azure Active Directory SSO with InVision V6 involves three primary tasks:

1. Adding InVision as a new application in Azure
2. Configuring the InVision application in Azure
3. Configuring Azure in InVision V6 (with help from InVision Support)

This article walks you through the process.

Adding InVision as a new application in Azure

To add the InVision app in Azure:

1. Sign in to Azure as an admin.
2. In the left-hand navigation, click Azure Active Directory.
3. Navigate to Enterprise Applications, click All Applications, and click New application.
4. In the Add from the gallery search box, enter InVision.
5. In the search results, click InVision and finish adding the app.

Configuring the InVision app in Azure

To configure and enable the InVision app in Azure:

1. Open the InVision app and, in the Manage section, click single sign-on.
2. On the Select a single sign-on method page, click SAML.
3. To the right of Basic SAML Configuration on the Set up single sign-on with SAML page, click the pen icon and edit the settings.
   For detailed instructions on editing these SAML configuration settings in Azure, check out the "Configure Azure AD SSO" section of Microsoft's related Help article.
4. In the SAML Signing Certificate section of the Set up single sign-on with SAML page, next to Certificate (Base64), click Download and save the certificate to your desktop (or wherever you can easily find it later).
5. In the Set up InVision section, copy the URLs next to each of these labels:

• Login URL
• Azure AD Identifier
• Logout URL

Once you've completed the steps above in Azure, follow the steps in Configuring Azure in InVision to complete the process.

Configuring Azure in InVision

Next, contact InVision Support so we can configure Azure for your InVision V6 Enterprise.

Support will need the following details or a metadata.xml file containing these details:

• Sign-in URL: This is the Login URL you saved in step 5 of the "Configuring the InVision app in Azure" instructions above.
• Sign-out URL: This is the Logout URL you saved in step 5 of the "Configuring the InVision app in Azure" instructions above.
• SAML Certificate: Attach the SAML signing certificate you downloaded in step 4.
• Name ID Format: This is generally urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
• HASH Algorithm: This is generally SHA-256