Microsoft Entra ID
Connect Microsoft Entra ID (Azure AD) to Detectify with a SAML enterprise application.
Before You Start
Contact your Customer Success Manager (CSM) to enable SSO. Ask for the Entity ID and ACS URL, and tell your CSM which user identifier you want: your email address, or a value that can’t change.
Create the Application
- Create a new enterprise application with Create your own application, and name it.
- Set up single sign-on with SAML.
- In the basic SAML configuration, enter the Entity ID and ACS URL from your CSM.
Map Attributes and Claims
Add these claims:
| Detectify attribute | Source attribute |
|---|---|
User.Email | user.mail |
User.FirstName | user.givenname |
User.LastName | user.surname |
User.MemberOf | user.groups, set up as a group claim |
User.Identifier | Only if you don’t identify users by email address: a unique attribute such as user.objectid |
If you reuse existing claims instead of adding new ones, leave their namespace field empty.
Add the Certificate
Upload or create a certificate for the application. Send the Base64 certificate to your CSM, together with the login URL, the Entra ID identifier and, optionally, the logout URL.
Create Groups
- Create a group and add members. You can name the group however you like. Names such as
detectify.admin.<team>make the groups easier to tell apart. - Copy the group’s object ID.
- Send the object ID to your CSM, with the team and access level that the group’s members should get. A group can also give its members one access level in all your teams.
Detectify reads the groups at every sign-in. See Teams and access levels for what happens when a user is in several groups.
Sign In
New users sign in the first time through the Entra ID login URL. After that, they can also sign in from the Detectify login page by choosing Single Sign-On.
Common Issues
A user didn’t join your company’s teams. The most common causes are:
- Reused claims whose namespace field wasn’t cleared
- The user isn’t assigned to the groups
- The group’s object ID hasn’t been sent to your CSM and mapped to a team
Your application doesn’t accept a ? in the Entity ID. Ask your CSM to change the format.
Fix the errors and sign in again. If the issue persists, contact support@detectify.com.