SSO configuration with Azure IdP

After you download the Tealium metadata file in Set up your SSO: Step 1, complete the following steps to configure Azure for use with Tealium SSO:

1. Log in to your Azure account and go to Identity > Applications > Enterprise applications > All applications.
2. Click + New Application.
3. Click + Create your own application.
4. Enter an application name. We recommend giving your application a name that lets others know what it was created for. For example, tealium, tealium-iq-user-federation, etc.

   

5. Ensure that Integrate any other application you don’t find in the gallery (Non-gallery) is selected.
6. Click Create.
7. Go to Manage > Single sign-on.
8. Select the SAML sign-on method.

   

9. In the Set up Single Sign-On with SAML screen, click Upload metadata file. Upload the metadata file that you downloaded in Set up your SSO: Step 1.

   

10. After you upload the Tealium metadata file, the basic SAML configuration information from the uploaded file is displayed. You do not need to change these settings.

    

    

11. Click Save.
12. In the Test single sign-on window, click No, I’ll test later.
13. In the Set up Single Sign-On with SAML screen, go to the Attributes & Claims section and click the edit icon.
14. Click + Add new claim and add a new claim with the following settings:
    • Claim name: email
    • Type: SAML
    • Value: user.mail
15. In the Set up Single Sign-On with SAML screen, go to the SAML Certificates section and download the Federation Metadata XML file.

    

16. Save this file to your computer. Use this file to complete the Tealium SSO configuration.

The following example shows a working configuration: