How to setup Microsoft Entra ID as an Identity Provider

Please read How to setup Single Sign On (SAML) before following this guide.

1. Login to Microsoft 365 as an Administrator
2. Go to the Admin portal
3. On the left menu, click Show all and then click All admin centers
4. Select Microsoft Entra
5. On the left menu click Enterprise apps
6. Click + New application
7. Search for "Workstars" and select it
8. Click the Create button
9. In the menu, under the Manage heading, click the Single sign-on option
10. Select SAML
11. Click the edit icon (pen) in the "Basic SAML Configuration" section
12. The Identifier (Entity ID) box should already contain "https://workstars.com"
13. In the Reply URL (Assertion Consumer Service URL) box, enter our ACS URL
14. Click the Save button at the top and close that window using the X in the corner

In the next step, you need to get some information so you can add your Identity Provider to our app:

1. In the SAML Certificates section, download the Certificate (Base64) to your desktop
2. In the Set up Workstars section, copy and save the following values:
   • Login URL (i.e. Sign on URL)
     • TIP - It should look something like "https://login.microsoftonline.com/xxxxx"
   • Microsoft Entra Identifier (i.e. Issuer)
     • TIP - It should look something like "https://sts.windows.net/xxxxx"

At this point we suggest you assign the app to a test user via Users & groups (once you have tested it, you can assign all your users as needed).