MIDAS SSO: Microsoft Entra ID (Azure AD)

This guide explains how to configure Microsoft Entra ID as a SAML Identity Provider (IdP) for MIDAS, allowing users to sign in using their Microsoft corporate accounts.

---

What you'll need before starting

• Admin access to Microsoft Entra ID
• Admin access to MIDAS
• MIDAS Unlimited Users licence
• A test user account in Entra ID with a valid email address

---

Overview of the process

1. Create a SAML application in Entra ID
2. Configure SAML settings (Entity ID, ACS URL, claims)
3. Download the Entra ID signing certificate
4. Configure SAML settings in MIDAS
5. Assign users and test login

---

Step 1 - Create the application in Entra ID

1. Sign in to the Microsoft Entra admin center
2. Go to Enterprise applications
3. Click New application
4. Select Create your own application
5. Enter a name, e.g. MIDAS SSO
6. Choose Integrate any other application you don't find in the gallery (Non-gallery)
7. Click Create

---

Step 2 - Enable SAML single sign-on

1. Open the newly created MIDAS SSO application
2. Select Single sign-on
3. Choose SAML

---

Step 3 - Configure Basic SAML settings

The "Set up Single Sign-On with SAML" page contains numbered sections:

Under "Basic SAML Configuration", enter:

Field	Value
Identifier (Entity ID)	MIDAS
Reply URL (ACS URL)	The URL of your MIDAS system i.e. https://demo.mid.as If testing using our SAML Test Tool, use the URL to the tool instead i.e. https://demo.mid.as/SAMLtest.pl
Sign-on URL	The URL of your MIDAS system i.e. https://demo.mid.as If testing using our SAML Test Tool, use the URL to the tool instead i.e. https://demo.mid.as/SAMLtest.pl

---

Step 4 - Check Attributes & Claims

MIDAS identifies users by email address. It is therefore important to check that an authenticated user's email address (i.e. "user.mail") is passed back to MIDAS, as well as the user's name (for example, "user.givenname" and "user.surname").

---

Step 5 - Download the SAML signing certificate

1. In the SAML Signing Certificate section
2. Download the Base64 certificate
3. Save it securely - you'll upload this to MIDAS

---

Step 6 - Assign users or groups

1. Open Users and groups
2. Assign:
   • Individual users or
   • A security group (recommended)

---

Step 7 - Configure SAML SSO in MIDAS

In MIDAS:

1. Go to Admin → Manage Users & Permissions → Single Sign-On (SSO)
2. Select SAML 2.0
3. Enter the following in the Identity Provider Settings section:

• Metadata - Enter the "App Federation Metadata URL" provided by Entra ID. Alternatively, in Entra ID you can download "Federation Metadata XML", and then copy and paste the contets of that file into this field.
• Certificate - copy and paste the contents of the Base64 certificate you downloaded from Entra ID

In the MIDAS Settings section, select a default permissions group for new users using the "Assign users permissions from" drop-down, and Save Changes.

---

Step 8 - Test the login

Option A: Entra ID test

• Use Test in the Entra ID SAML screen

Option B: Direct login

• Visit your MIDAS SSO login URL
• Sign in with an assigned Entra ID user