Configure Azure Entra ID SAML SSO for Jericho Security

This page walks you through creating and configuring a SAML 2.0 enterprise application in Microsoft Azure Entra ID that connects to your Jericho Security tenant. You will set the required SAML endpoints in Azure, then share a set of configuration values with your Jericho technical contact to complete the integration.

Open Microsoft Entra

Sign in to Microsoft Entra with permission to manage enterprise applications.

Open Enterprise applications

Open Entra ID > Enterprise apps > All applications.

Create a new application

Click New application, then click Create your own application.

Name and create the application

Enter a name for the application — for example, Jericho Security SSO — then click Create.

Start the single sign-on setup

In the application’s Manage section, select Single sign-on, then SAML.

Edit the Basic SAML Configuration

In the SAML-based Sign-on page, click the edit icon next to Basic SAML Configuration.

Set the Identifier (Entity ID)

Set Identifier (Entity ID) to the value agreed with your Jericho technical contact. Make a note of this value — you will need to send it to your Jericho technical contact.

Set the Reply URL (ACS URL)

Set Reply URL (Assertion Consumer Service URL) to Jericho’s SAML ACS endpoint:

https://app.jerichosecurity.com/users/saml/auth

Save the configuration

Click Save at the top of the Basic SAML Configuration panel.

Send configuration values to your Jericho technical contact

From the SAML-based Sign-on page, collect and send the following values to your Jericho technical contact:

• The Entity ID you set in the previous step
• Microsoft Entra Identifier URL
• App Federation Metadata URL
• Login URL

Assign users and groups

Navigate to Users and groups for the application and assign all users and/or groups that you want to be able to sign in to Jericho Security via SSO.

Log in with SAML

Once your Jericho technical contact confirms that your tenant has been configured, go to the Jericho Security login page, enter your email address, and click Log in with SAML.

Note

The Test connection button in Azure may not succeed until your Jericho technical contact has updated your tenant’s configuration. You can proceed with the setup and test after Jericho confirms the configuration is complete.

Note

For a user to have a Manager or Admin role in Jericho Security, they must be invited to the platform with that role using the same email address they use with your identity provider.

Verify access

Assign a test user to the identity-provider app and ensure their SAML email matches their Jericho account. An app assignment alone does not grant a Jericho Manager or Admin role; arrange the corresponding Jericho invitation with your administrator. Test sign-in after your technical contact confirms the SAML configuration is complete.

Vendor reference: Microsoft SAML setup.