How to setup Microsoft Entra ID as an Identity Provider

Please read How to setup Single Sign On (SAML) before following this guide.

1. Login to Microsoft 365 as an Administrator
2. Go to the Admin portal
3. On the left menu, click Show all and then click All admin centers
4. Select Identity (or Microsoft Entra)
5. On the left menu click Enterprise apps
6. Click + New application
7. Search for "Workstars" and select it
8. Click the Create button
9. On the Overview page, in the "Getting Started" section, click the Set up single sign-on option
10. Select SAML
11. Click the edit icon (pen) in the "Basic SAML Configuration" section
12. In the Identifier (Entity ID) box replace "https://workstars.com" with our Entity ID
13. In the Reply URL (Assertion Consumer Service URL) box, click "Add reply URL" and enter our ACS URL
14. Click the Save button (top left)
15. Close the Basic SAML Configuration window using the X in the corner

In the next step, you need to get some information so you can add your Identity Provider to our app:

1. In the SAML Certificates section, download the Certificate (Base64) to your desktop
2. In the Set up Workstars section, copy and save the following values:
   • Login URL (i.e. Sign on URL)
     • TIP - It should look something like "https://login.microsoftonline.com/xxxxx"
   • Microsoft Entra Identifier (i.e. Issuer)
     • TIP - It should look something like "https://sts.windows.net/xxxxx"

TIP - We suggest you assign the app to a test user via Users & groups.