Connecting with Entra ID (Azure Active Directory) SAML

It is vital for adoption and productivity to make sure that your systems can connect to one another.  Well, luckily for you, BombBomb can connect with many systems through Azure SSO.  Follow the steps below to set that connection up.

Create a Custom Enterprise Application

1. Go to portal.azure.com and open the "Azure Active Directory Portal." 

2. Navigate to "Enterprise Applications" in the left nav menu . 

3. Click "New application." 

4. Click "Create your own application ."

5. Enter AAD to BombBomb as the name of the app.  

1. • You may enter whatever value you want here; it has no bearing on future steps. Do not use “BombBomb.” That will be the name of our Azure AD App when it is released.  

7. Select "Integrate any other application you don't find in the gallery (Non-gallery)."  

1. • Ignore the prompt below “We found the following applications that may match your entry”. The old BombBomb entry there is out of date and does not work.  

1. 8. Click "Create."

Configure Single Sign-On  

1. In the enterprise application overview window, click on "Single sign-on" in the left nav menu. 

2. Click "SAML" in the Select a single sign-on method  

Step 1: Edit Basic SAML Configuration  

1. Click the "Edit pencil" in step 1, Basic SAML Configuration  

2. Select "Add Identifier" in the Identifier (Entity ID) section and enter the following value for your setup:  

urn:auth0:bombbomb:[YOUR_COMPANY_NAME_IN_LOWERCASE]-saml

3. Select Add Identifier in the Reply URL (Assertion Consumer Service URL) and enter the following value for your setup:  

https://auth.bombbomb.com/login/callback?connection=yourcompanynameinlowercase-saml

4. Enter https://app.bombbomb.com/app for the Sign-on URL 

5. Leave Relay State empty  

6. Enter https://app.bombbomb.com/app/index.php?actn=logout as the value for “Logout URL”  

Step 2: Confirm Attributes & Claims  

1. Verify the following values are set in Step 2, "Attributes & Claims"  

Step 3: Send an email to your BombBomb representative with the following information  

1. Download and attach the Certificate (Base64) file  

2. Copy and paste the Login URL value  

3. Copy and paste the Azure AD Identifier  

4. Copy the Logout URL value  

5. Include in the email the above items as well as the identifier you used in Step 1 above and a  list of email address domains that should redirect to your login page when entered.   

For example, if you provide an email address domain of @example.com and @example.org, a user signing in with jane@example.com or joe@example.org will redirect to your sign-in page for authentication. Users will also be prevented from signing in with those email domains directly and through a third-party provider, such as Google Sign-In.  

Step 4: Verify users have been added 

• Confirm users have been added both in BombBomb and in the Azure Active Directory Users and groups. 

Azure Resources: SSO and Assigning Users