Status Page SSO with Azure

Adding SAML single sign on to your status page provides authenticated access control.  Only authorized and authenticated users can see your status page.  

Setup

Roughly, the following steps are required to setup status page SSO in StatusGator.

• Configure an enterprise application in Azure.
• Configure StatusGator to use your Azure enterprise application for SSO into your status page
• Add users to your Azure enterprise application to grant them access to your status page.

NOTE: Status Page SSO requires a dedicated enterprise application.  If you have already setup administrative SSO to access StatusGator using the pre-existing enterprise application for status pages will not work.

Application Creation

1. Log in to your Azure account as an admin. Find the Azure services list and locate the Enterprise applications icon. Click this icon to open enterprise applications. At the top of the All applications listing, find the New application link. Use this link to choose to create a new enterprise appliction.

2. Click on the Create your own application button, name your application in the modal window (f.e StatusGator status page), and hit Create.

3. Next, click on the Get started link in the Setup single sign on section.

4. Among the single sign on options, choose SAML.

5. You will be presented with a multi-section setup page.  Edit "Basic SAML Configuration" section.

6. These settings need to come from the StatusGator user interface. You can find them under Status page/Privacy/SAML SSO radiobutton. 

Note: Keep the tab open, you'll need to go back here and add value from the Azure account once you set it up.

7. Now go back to your Azure account, and use values from StatusGator to fill out the form:

• Issuer/Audience URL – for the Identifier (Entity ID) filed;
• SSO URL – for Reply URL, Sign on URL, ad Sign out URL fields. 

• You can leave the Relay State field empty.

Don't forget to Save configurations.

8. Switch back to StatusGator again and fill out the rest of the form on the Privacy tab. You'll need to use values from the Azure account (section 3 and section 4).

• Identity Provider Entity ID – Azure AD Identifier from section four 
• Sign On URL – Sign In URL from section four
• Sign Out URL – Sign Out URL from section four
• IDP Certificate – Download the Base64 encoded certificate from section three. Paste the base64 encoded contents into this field.

9. Now, Add users to your StatusPage application in Azure. Visit the users and groups area and grant permission for users to access the status page.

Note: Identity provider initiated sign in with Azure is not functional. Simply visiting your status page should transparently log you into and show the status page. Clicking on the enterprise application in Office 365 will prompt the users for an email address on the StatusGator side and then single sign in your users.