Microsoft Entra ID（formerly Azure AD）-SAML2.0

eSignGlobal supports identity federation based on SAML2.0. You can integrate Microsoft Entra ID with eSignGlobal by SAML2.0 to enable single sign-on eSignGlobal for Microsoft Entra ID accounts. It is not necessary to create a CAM user for every user of the enterprise or organization.

Create a Microsoft Entra ID application

1. After logging in to Azure Portal, click [display menu] on the left of the top to enter [Microsoft Entra ID].

2. Click [Enterprise applications] in the [Manage] column on the left.

3. Click [All applications] in the left menu bar, then click [New application].

4. Click [Create your own application] in the top menu bar.

5. Input the application name, select [Integrate any other application you don't find in the gallery (Non-gallery)] and create.

6. The following page appears to indicate creating successfully.

Assign user access

1. Click [Assign users and groups].

2. Click [Add user/group].

3. Click [None Selected] to enter the add user page.

Select the required user and confirm the selection.

4. Click [Assign] to complete the assignment.

5. You can view the added users in the [Users and groups].

Set up single sign-on

1. Click the menu bar on the left [Single sign-on] and select [SAML] as the single sign-on method.

2. To set up SAML single sign-on, you need to fill in the Identifier(Entity ID) and Reply URL(Assertion Consumer Service URL).

3. Return to the eSignGlobal website, log in and install the [Single Sign-on with SAML2.0] add-on, and click [Settings] in the top menu bar.

4. Click [Single Sign-On] in the [Security] directory on the left.

5. Click [Add Configuration], enter [SP Identifier], and select [SSO Protocol] as SAML2.0.

6. After the input is completed, [Audience URL] (Service Provider Entity ID) and [ACS URL] will be automatically generated. Click on the right to copy them to the Microsoft Entra ID [SAML-based Sign-on] page.

7. Back to the Microsoft Entra ID [SAML-based Sign-on] page and click [Edit].

Fill in the copied [Audience URL] with [Identifier] (Entity ID); [ACS URL] fill in [Reply URL] (Assertion Consumer Service URL), and click [Save] above after completion.

8. After the save is successful, click close in the upper right corner, and the page will display the filled Identifier and Reply URL.

9. Slide down the page to download the [Federation Metadata XML] file in [SAML Certificates].

10. Back to the eSignGlobal [Add Configuration] page and click to upload the downloaded XML file.

11. After the upload is successful, the [Single Sign-on URL] and [Signing Certificate] will be automatically filled in, and click [Confirm].

When the status displays [Enabled], it indicates that the SSO configuration is successful.

Verify SSO

1. On the eSignGlobal official website login page, choose SSO login.

2. Enter the workspace identifier and click [Log in].

3. The page will redirect to Microsoft login and select the corresponding Microsoft account.

4. Enter the email and the verification code sent to the email in the page, click [Submit], and log in to the eSignGlobal homepage.