Sign in to the Azure portal (https://portal.azure.com) using your administrator account.
​

Navigate to Enterprise applications.

Select + New application.

Select + Create your own application

Create the Application

In the newly created application, navigate to Single sign-on

Select SAML as the single sign-on method

Under SAML Signing Certificate (Box 3), copy the App Federation Metadata URL and paste it into an empty word or notepad document. You will need it in a subsequent step.

Typically, this URL will usually be in the following format (note this is just an example for reference, yours will be different):

Without closing the Azure tab, open a new browser tab, and navigate to the WaitWell sign in page and sign in to your WaitWell admin account. If you have not yet had a WaitWell account created, contact your WaitWell account manager to request one.
​US Sign In: https://app.waitwell.us
Canada Sign In: https://app.waitwell.ca
​

At any location, navigate to Settings > Location > Tools. Then select the Integrations button

Select the Configure button next to the SSO icon

Enter your organization's SSO email domain

Toggle "Enable SSO" on

Under the Identity Provider Configuration section, paste the App Federation Metadata URL into the SAML Metadata URL field, then select the Load Metadata button. This should populate all subsequent fields on this page.

Select the Save button at the bottom right of the page

Under the Service Provider Information section, copy the WaitWell Entity ID and the Assertion Consumer Service (ACS) URL and paste it them in an empty word or notepad document. You will need them in a subsequent step.

Navigate back to the Azure browser tab. Select Edit at the top right of Basic SAML Configuration box

Under Identifier (Entity ID), in the field, paste in the WaitWell Entity ID copied from WaitWell.

Under Reply URL (Assertion Consumer Service URL), paste in the Assertion Consumer Service (ACS) URL copied from WaitWell.

Under Sign on URL, enter:

​

Test the SSO Connection: After configuring both Azure and the service provider, test the SSO by navigating to app.waitwell.us (if in United States) or app.waitwell.ca (if in Canada) and attempt to log in with a SSO user's credentials. Note, the assigned user must already have an account created in WaitWell with an email address that matches their SSO email address. for SSO to work.
​
Please ensure there are no trailing "/" at the end of any URLs entered in this process, as it may result in errors (i.e. https://app.waitwell.us/ is bad, https://app.waitwell.us is good).