Skip to main content

How to configure Short.io SSO via Microsoft Azure Active Directory

Short.io supports Single Sign-On (SSO) integration with Microsoft Azure Active Directory.

Note

SSO is available on the Enterprise Plan.

Before you begin​

You need to create a Team in Short.io before setting up SSO. Follow the instructions in this article.

How to configure SSO with Azure Active Directory​

Azure settings​

  1. Sign in to your Microsoft Azure account.

  2. In the search field enter Enterprise applications and from the result list select the service with the same name:

    Azure portal search bar with Enterprise applications highlighted in results

  3. Click on + New application:

    Enterprise applications page with New application button highlighted

  4. Click on + Create your own application:

    Browse Microsoft Entra Gallery with Create your own application button highlighted

  5. Enter a name for the application and select Integrate any other application you don’t find in the gallery:

    Create your own application form with Short.io name and non-gallery option selected

  6. Click on Create.

  7. In the Getting Started screen select Set up single sign on:

    Azure Getting Started page with Set up single sign on option highlighted

  8. Choose SAML as SSO method:

    Single sign-on method selection page with SAML option highlighted

  9. In the Basic SAML configuration screen:

    Basic SAML Configuration with identifier and reply URL fields highlighted

  10. When prompted to test the SSO, click on No, I’ll test later:

    Test SSO prompt dialog with No I'll test later button highlighted

  11. In the Single sign-on configurations page navigate to the SAML Certificates section:

    SAML Certificates section with Certificate Base64 download link highlighted

  12. Download the Certificate (Base64) on your device.

  13. From the Set up panel copy and save in a text document the Login URL and the Microsoft Entra identifier:

    Set up Short.io panel with Login URL and Microsoft Entra Identifier highlighted

  14. From the Manage menu select Users and groups and click on + Add user/group:

    Users and groups page with Add user/group button highlighted

  15. Mark the needed user(s) and click on Select:

    User selection panel with a user checked and Select button highlighted

  16. Review the selection and click on Assign:

    Add Assignment page with one user selected and Assign button highlighted

  17. Your settings are applied:

Users and groups page showing the assigned user in the list

Short.io settings​

  1. Sign in to your Short.io account.

  2. Navigate to the Settings and click on Teams:

    Short.io Settings page with Teams and SAML configuration options highlighted

  3. Click on your team and then click SAML Configuration.

  4. In the next screen:

    • enable the SAML configuration:

      SAML configuration section with Config enabled toggle

    • enter the name of your company in the SSO configuration field:

      SSO configuration name field with company name and ACS URL displayed

    • paste the Microsoft Login URL which you copied from the Microsoft application settings into the Entry point URL field:

      Entry Point URL field populated with Microsoft login URL

    • open the certificate which you downloaded in a text editor, copy and paste the content of the certificate into the Public certificate field:

      Public certificate field with X509 certificate content pasted

    • you can specify whether or not the SSO is required for All members of the team or is Optional:

      SSO requirement options for the team with All members and Optional choices

    • expand the Advanced options and paste the Microsoft Entra Identifier which you copied from the application settings into the Service provider issuer field:

      Advanced options with Service provider issuer field populated with Microsoft Entra Identifier

    • you can determine if a profile should be updated each time the user logs in,

      and if the users are allowed to chose their own display name:

      Profile update and display name settings checkboxes

    • you can change the appearance of the Sign in button by adding a custom label:

      Custom label field for sign-in button with Save button highlighted

  5. Click on Save to confirm.

You can now use the Single Sign-On with Short.io.

Note

The Short.io team configures SSO within 24 hours.

In case you need further assistance, please contact the Short.io support team at [email protected].