Azure AD Single-Sign-On

This document describes how to integrate Optimove with Azure AD’s identity provider system, to implement a SAML-based Single-Sign-On flow in Optimove.

Follow these instructions to prepare your AzureAD account for integration with Optimove

Setting Up the Integration in Azure AD

Create a user in Optimove
Sign into your Azure account at portal.azure.com
Under Azure Services, go to Azure Active Directory
Go to Enterprise Applications
Click “New Application”

Select “Azure AD SAML toolkit” in the options.

Name it and approve.
Return to “All Applications” and select the new application you just created
Click “Get Started”
Your new application can be configured in the “Single Sign On” tab in the menu.

Basic SAML Configuration

In the below steps, please replace XXX with the name of your Optimove site - XXX.optimove.net,
make sure to use lower-case letters.

• identifier - urn:auth0:optimove-production:XXX-azure
• Reply URL - https://optimove-production.eu.auth0.com/login/callback?connection=XXX-azure
• Sign on URL - https://optimove-production.eu.auth0.com/login/callback?connection=XXX-azure

Click on "Add new claim" and set the following-
Name: email_verified
Source = Attribute
Source attribute: true

Download the SAML certificate (Base64)

Under "Set up auth0-to-Optimove, copy and save the “Login URL”.

Go the the "Users & Groups" tab-

Select the users you would like to assign to this connection (users must also exist in the Optimove application)

Please use the Information you copied/downloaded (Login URL and SAML certificate in .PEM or .CER format only) and share it with the Optimove team in the following form- https://run.ply.io/run/O3mR1BE5.
This will open a ticket for the Optimove team to finalize the integration.

Optimove will notify you once the configuration is ready and schedule a date to turn on the SSO connection.
Optional – You may add test user credentials in the form; this test user should be created by you in both Optimove and Azure with Optimove as the assigned application; this user will be used to test the integration by the Optimove team.