SAML through Microsoft Azure

Instructions for Azure / Entra ID IdPs that are not federated

Learn360 offers the ability to connect your Azure account for authentication. Please note that user provisioning and rostering is not currently offered; the connection works via domain match and will not create a new user in the Infobase system or log a user into their existing personal account. 

Please follow these steps to set it up:

1. Include the following entity ID and metadata to the IdPs list of whitelisted SPs:

   1. SP Metadata URL: https://sp.openathens.net/metadata-sp/credoreference.com/235ba2cc-44a1-44fa-a9a3-e9a434dd2930?hostedLogos=false

2. SP Entity ID: https://search.credoreference.com/oa/entity

3. Share your metadata URL and entity ID with Infobase ([e-mail]) or use this custom Google form to send us the information: https://forms.gle/pFiPcxSkD76Nm2sMA

4. Ensure that the eduPersonScopedAffiliation attribute is released with the name urn:oid:1.3.6.1.4.1.5923.1.1.1.9. This attribute specifies the person's affiliation within a particular security domain in broad categories such as student, faculty, staff, alum, etc. Example values of this attribute are: [e-mail], [e-mail]. The part before the @ signifies the affiliation of the user within the domain. The part after the @ can be the domain name. The full set of expected values in this attribute need to be shared with Infobase, to complete SAML setup on the account.

5. Ensure that the eduPersonTargetedID attribute is released with the name urn:oid:1.3.6.1.4.1.5923.1.1.1.9. Ensure that this attribute is present in the SAML response.