Follow the below process to setup SAML SSO for Microsoft Azure in your Goody account:
In your Microsoft Azure admin account, navigate to Enterprise Applications > All Applications
Click New application
Click Create your own application
Name your application "Goody"
Select "Integrate any other application you don't find in the gallery (Non-gallery)"
Click Create. This will create your custom Goody application and bring you to the Overview page.
In a separate browser, login to your Goody account. Go to Organization > Settings > SAML SSO to view the SAML SSO settings and download the Goody logo. Leave this page open as you'll need tor reference the setting fields.
(Optional) On your Microsoft Enterprise Application Overview page, go to Manage > Properties, and under Logo, upload the Goody Logo. Click Save.
On your Microsoft Enterprise Application Overview, click 1. Assign users and groups
Click Add user/group to add the users and/or groups who will have access to the application.
Once users and groups are added, click 2. Set up single sign on on the Overview page.
Select SAML.
Under 1. Basic SAML Configuration, click Edit. Enter these attributes:
Identifier (Entity ID): Copy Goody's SP Entity ID
Reply URL (Assertion Consumer Service URL): Copy Goody's ACS URL
The remaining optional attributes can be left blank.
Click Save.
Under 2. Attributes & Claims, click Edit.
Under Required claim, set the Unique User Identifier (Name ID) source attribute to user.mail.
Under Additional claims, delete each of the claims by clicking the three dots (...) next to each claim, and clicking Delete.
Add three new claims as follows:
Name: first_name, Source attribute: user.givenname
Name: last_name, Source attribute: user.surname
Name: email, Source attribute: user.mail
This is all the configuration needed on the Microsoft end. You'll now need to copy three values from your Microsoft settings to your Goody SAML settings page:
Under 3. SAML Certificates, open the App Federation Metadata Url and copy the X509 certificate value. Paste this into Goody's Certificate field.
Under 4. Set up Goody, copy the Login URL. Paste this into Goody's SSO URL field.
Also under 4. Set up Goody, copy the Microsoft Entra Identifier. Paste this into Goody's Entity ID field.
This completes configuration needed on Goody's end.
Now you can test your SAML setup. Under 5. Test single sign-on with Goody, click Test.
Click Test sign in. A new browser will open up and you should be redirected to the Goody website and signed in.