Set Up Azure for Censys SAML Authentication
Use this article to enable SSO with Azure Active Directory as your Identity Provider for Censys authentication.
This is 1 part of a 2 part process to configure SAML-based authentication for people on your Censys team.
To successfully complete this setup, you must select the Use SAML check box on the Censys Team Authentication page. Information necessary to this setup article is available in the SP Details section.
-
Log into Azure Active Directory and click the Azure Active Directory service.
-
On the left navigation, click Enterprise Applications.
-
In the menu bar near the top of the page, click New Application.
-
Click Create your own application.
-
In the dialog box that appears, name the app Censys.
-
Select Integrate another application not found in the gallery (Non-gallery) and click Save.
-
From the Overview page, in the Getting Started section, click the Set up single sign on card.
-
On the next page, select SAML for the single sign-on method.
-
Provide information about the Censys application:
-
For the Identifier field, copy the Entity ID URL from the SP Details section of the Censys Authentication page.
-
For the Reply URL field, paste the Assertion Consumer Service URL from the SP Details section of the Censys Authentication page.
-
Leave the Sign Authentication Requests checkbox selected.
-
-
Click Save.
-
In the Attribute & Claims section, verify the following claims are present and click Save when you're done:
-
Required Claim:
-
Name:
nameidentifierName identifier format: Email Address
Source: Attribute
Source attribute:
user.userprincipalname
-
-
Additional Claims:
-
Name: givenname
Namespace: http://schemas.xmlsoap.org/ws/2005/05/identity/claims
Source: Attribute
Source attribute:
user.givenname -
Name: surname
Namespace: http://schemas.xmlsoap.org/ws/2005/05/identity/claims
Source: Attribute
Source attribute:
user.surname
-
-
With Azure configured to authenticate Censys users, you're ready to Set Up Censys for SAML Authentication.
Copy the App Federation Metadata URL on the SAML Signing Certificate card in the Single Sign On settings of your newly configured enterprise application for one-click setup on the Censys side.