SSO configuration with Azure IdP

After you download the Tealium metadata file in Set up your SSO: Step 1, complete the following steps to configure Azure for use with Tealium SSO:

1. Login to your Azure account and navigate to Identity > Applications > Enterprise applications > All applications.
2. Click + New Application.
3. Click + Create your own application.
4. Enter an application name. We recommend giving your application a name that lets others know what it was created for. For example, tealium, tealium-iq-user-federation, etc.

   

5. Ensure that Integrate any other application you don’t find in the gallery (Non-gallery) is selected.
6. Click Create.
7. Navigate to Manage > Single sign-on.
8. Select SAML sign-on method.

   

9. In the Set up Single Sign-On with SAML screen, click Upload metadata file. Upload the metadata file that you downloaded in Set up your SSO: Step 1.

   

10. After you upload the Tealium metadata file, you will see the basic SAML configuration information from the uploaded file. You do not need to change these settings.

    

    

11. Click Save.
12. In the Test single sign-on dialogue, click No, I’ll test later.
13. In the Set up Single Sign-On with SAML screen, go to the Attributes & Claims section and click the edit icon.
14. Click + Add new claim and add a new claim with the following settings:
    • Claim name: email
    • Type: SAML
    • Value: user.mail
15. In the Set up Single Sign-On with SAML screen, go to the SAML Certificates section and download the Federation Metadata XML file.

    

16. Save this file to your computer. You will use this file to complete the Tealium SSO configuration.