How to Configure Microsoft Entra for Gladstone SSO
Problem
You need to set up your Microsoft Entra (formerly Azure AD) tenant so it can be used for Single Sign-On (SSO) with Gladstone products. This is required for operators or consumers following enablement by your Account Manager.
Resolution
Open Microsoft Entra Admin Center
- Log in to your Microsoft Entra Admin Center.
Navigate to Enterprise Applications
- From the left-hand menu, select Identity > Applications > Enterprise Applications.
Create a New Application
- Select New application, then choose Create your own application.
Configure Application Details
- Enter a name (e.g., "GladstoneGo").
- Select Integrate any other application and click Create.
Assign Users and Groups
- Select Users and Groups.
- Assign relevant groups for staff and consumer access. At minimum, create:
- A Gladstone Go Staff group for back-office users.
- A Gladstone Go Consumer group for member access.
Configure Single Sign-On
- Select Single Sign-on.
- Choose SAML as the method.
Configure Basic SAML Settings
- Select Edit and enter the following:
- Identifier:
gladstonesoftware.cloud - Reply URL:
https://samlauthentication.gladstonesoftware.cloud/api/samlauthentication/log-in-callback
- Identifier:
- Select Edit and enter the following:
Configure Group Claims
- Select Edit under Attributes & Claims.
- Add a group claim using the following settings:
- Groups assigned to the application
- Source Attribute: Group ID
Notes
- This SSO setup covers access for both Operator and Gladstone360. Permissions for the applications themselves are still configured within the Gladstone Management Console (GMC) as before.
- Prerequisites:
- Access to Microsoft Entra Admin Center.
- Permissions to create Enterprise Applications and groups, and assign groups within Entra.
Related Articles
- How to configure Gladstone products for Consumer SSO
- How to configure Gladstone products for Operator SSO
- The Consumer SSO experience