SSO: Azure Active Directory

Integrating SmarterU with Azure Active Directory (Azure AD) allows you to:

• Control who has access to SmarterU from Azure AD
• Automatically sign users into SmarterU using their Azure AD accounts (i.e. single sign-on)
• Manage your accounts from the Azure portal

To set up Azure AD with SmarterU:

1. Add SmarterU as a managed app in Azure AD. 
2. Configure single sign-on in Azure AD.
3. Configure single sign-on in SmarterU.
4. Create a user in Azure AD. See note about creating a test user, below this list.
5. Assign the SmarterU app to the Azure AD user. See note about creating a test user, below this list.
6. Add the user to SmarterU. See note about creating a test user, below this list.

Adding SmarterU as a Managed App 

To add SmarterU as a managed app in Azure AD:

1. From the left menu in Azure, select Azure Active Directory. 

2. From the sub-menu, select Enterprise Applications.

3. Ensure All Applications is selected.
4. Click New Application.

5. In the Add From the Gallery section, enter SmarterU in the search field.

The SmarterU application displays in the search results. 

6. Click SmarterU.
7. Click Add.

NEXT STEP: Configure single sign-on in Azure AD.

Configuring Single Sign-On in Azure AD

To configure single sign-on in Azure AD:

1. From the SmarterU - Overview page's menu, select Single Sign-On. 

2. Select SAML.
3. From the Basic SAML Configuration section, click . The Basic SAML Configuration workscreen displays.
4. From the Basic SAML Configuration workscreen:
   1. In the Identifier field, be sure the identifier is https://integrations.smarteru.com/<accountID>, where you replace <accountID> with your account's ID.  

You can find your account's ID by logging into SmarterU and looking at the URL.

2. Click Save.
3. Click  to close the Basic SAML Configuration workscreen.

5. On the SmarterU - SAML-Based Sign On page, scroll down to the SAML Signing Certificate section.
6. From the SAML Signing Certificate section, click the Download link beside Federation Metadata XML. 

7. Save the file to your computer. You'll need this file in the Configuring Single Sign-On in SmarterU step.

NEXT STEP: Configure single sign-on in SmarterU.

Configuring Single Sign-On in SmarterU

To configure single sign-on in SmarterU:

1. Enable external authorization for your SmarterU account.
2. Specify the following settings:

3. Click Save.

NEXT STEP: Create a user in Azure AD.

Creating a User in Azure AD

To create a user in Azure AD:

1. From the left menu in Azure, select Azure Active Directory.
2. Select Users.

3. Ensure All Users is selected. 
4. Click New User.

The User workscreen displays.

5. Select Create User. 
6. Specify the following settings in the User workscreen.

7. In the Password section, do one of the following.

• To auto-generate a password, select the Auto-Generate Password option and check the Show Password checkbox. Make note of the password as you'll need it when you create the user's SmarterU user account. 
• To specify the user's password, select the Let Me Create a Password option and enter the user's password. 

8. Click Create.

NEXT STEP: Assign the SmarterU app to the user.

Assigning the SmarterU App to the User

In order for the SmarterU app to display in the user's Azure Access Panel, you'll need to assign the app to the user. 

To assign the SmarterU app to the Azure AD user:

1. From the left menu in Azure, select Azure Active Directory.
2. Select Enterprise Applications.

3. Select All Applications.
4. From the list of applications, select SmarterU.
5. Select Users and Groups.
6. Click Add User. The Add Assignment workscreen displays.
7. Click Users.

The Users panel displays.

8. Click the name of the user. The user's name displays in the Selected Items section of the panel.

9. Click Select. The Add Assignment workscreen reflects the number of users that were selected.
10. Click Assign.

NEXT STEP: Adding the user to SmarterU.

Adding the User to SmarterU

To add the user to SmarterU:

1. Follow the steps detailed on the Adding a User Manually page.
2. Be sure that the email address specified matches the user's Azure AD email address.
3. Determine the URL users will use to log in.
4. Log in with single sign-on using the test user. 

Determining the URL Users Will Use to Log In

To determine the URL that users will use to log in:

1. From the left menu in Azure, select Azure Active Directory.
2. Select Enterprise Applications.
3. From the list of applications, select SmarterU.
4. Select Properties.
5. Locate the User Access URL. This is the URL that users will use to log in.

Troubleshooting

If your users are having trouble logging in, refer to our Troubleshooting User Accounts page for common issues.