Azure SAML Setup Guide
Navigate to Enterprise Applications to begin creating a new application.
On the New Application page, click "Create your own application".
Give your app a name (we recommend CisionOne) and make sure "Integrate any other application you don’t find in the gallery (Non-gallery)" is selected, then click Create.
In the settings of the newly created application, click "2. Set up single sign on".
Select "SAML".
In section one, click "Edit" in the top right.
Copy/paste the Identifier and ACS URLs from CisionOne, ensuring:
The ACS URL goes into the Reply URL field in Azure.
The SP ENTITY ID URL goes into the Identifier field in Azure.
Next, set up claims. Azure will create a default set of claims, but these are incorrect and must be changed. Click Edit in the top right.
Remove all default Additional claims created by Azure by clicking the … menu and selecting Delete.
For each required CisionOne attribute —
email,first_name,last_name— add a new claim:Set the Name and Source attribute.
Leave the Namespace field empty.
When done, the claims page should reflect the required attributes.
Return to the SAML configuration page — we now need to set the certificate in CisionOne.
Download either the Certificate (Base64) or the Federation Metadata XML.
Open in a text editor and copy the
X509Certificatevalue into the CisionOne SAML setup.
Set up the sign-in and identity URLs:
Go to Section 4 in Azure.
Copy the Login URL from Azure into the SSO URL field in CisionOne.
Copy the Microsoft Entra Identifier URL into the IDENTITY ID field in CisionOne.
In the CisionOne SAML setup, add your domain by typing it into the box and pressing Add.
