How do I set up Azure AD (Microsoft Entra) SSO for my organization?
Connect your Azure Active Directory (Microsoft Entra) environment so your users can sign in to Seed Talent with single sign on.
Seed Talent supports single sign on (SSO) through Azure Active Directory (Microsoft Entra), so your team can log in to Seed Talent using their existing Microsoft credentials. Setting this up has two parts: creating a SAML application in Azure, and entering that application's details into your organization's SSO configuration in Seed Talent.
Part 1: Create a SAML application in Azure
- In the Azure portal, go to Enterprise Applications.
- Select an existing application you've already created for this purpose, or create a new one.
- If creating a new application, choose "Create your own application," give it a name, then select "Set up single sign on" and choose SAML as the sign on method.
- Under Basic SAML Configuration, enter the Identifier (Entity ID) as seedtalent.
- Enter the Reply URL (Assertion Consumer Service URL). Use https://staging-api.seedtalent.com/api/v1/auth/saml/callback for staging, or https://api.seedtalent.com/api/v1/auth/saml/callback for production. You can add more than one Reply URL if you need both.
- Set Name ID to Email Address, and Application username to Email.
- Once configured, note down three values from your Azure application: the Sign on URL (Login URL), the Issuer, and the Certificate (Base64). You'll download the certificate and use all three in the next part.
Part 2: Enter your SSO configuration in Seed Talent
- In Seed Talent, go to your organization's settings and open the SSO Configuration tab.
- If no SSO configuration exists yet, you'll see "No SSO configuration found." Click Configure SSO. If you're updating an existing configuration, click Update SSO instead.
- Enter the Identity Provider SSO URL (the Sign on URL from Azure, a valid http or https URL), the Identity Provider Issuer (the Issuer value from Azure), and upload the Certificate file you downloaded from Azure (.crt, .cer, or .cert).
- Save your configuration.
Once saved, make sure each user who should use SSO exists both in Azure and in the Seed Talent organization where SSO is enabled. Users will then be able to sign in to Seed Talent with their Microsoft credentials.
If you run into trouble during setup, reach out to your Seed Talent contact or submit a support request, and include your organization name and the error you're seeing.