Skip to content

Update honestly-tutorial.md to make it more user friendly #1706

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 2 commits into
base: main
Choose a base branch
from
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
46 changes: 32 additions & 14 deletions docs/identity/saas-apps/honestly-tutorial.md
Original file line number Diff line number Diff line change
Expand Up @@ -73,36 +73,55 @@ To configure and test Microsoft Entra SSO with Honestly, complete the following
Follow these steps to enable Microsoft Entra SSO.

1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Cloud Application Administrator](~/identity/role-based-access-control/permissions-reference.md#cloud-application-administrator).
1. Browse to **Entra ID** > **Enterprise apps** > **Honestly** > **Single sign-on**.
1. On the **Select a single sign-on method** page, select **SAML**.
1. Browse to **Entra ID** > **Enterprise apps** > **Honestly**
1. On the **Honestly** App page, select **2. Set up single sign on**.
1. On the **Set up single sign-on with SAML** page, select the edit/pen icon for **Basic SAML Configuration** to edit the settings.

![Edit Basic SAML Configuration](common/edit-urls.png)

1. On the **Basic SAML Configuration** section, if you wish to configure the application in **IDP** initiated mode, enter the values for the following fields:

a. In the **Identifier** text box, type a URL using the following pattern:
a. In the **Identifier (Entity ID)** text box, type a URL using the following pattern:

`https://webapp.honestly.de/saml2/<client-id>/metadata`

You can find this value of your Honestly account on the **Honestly SSO** page in the field **Honestly Entity ID**

b. In the **Reply URL** text box, type a URL using the following pattern:
b. In the **Reply URL (Assertion Consumer Service URL)** text box, type a URL using the following pattern:

`https://webapp.honestly.de/saml2/<client-id>/acs`

You can find this value of your Honestly account on the **Honestly SSO** page in the field **Honestly ACS URL**

> [!NOTE]
> These values aren't real. Update these values with the actual Identifier and Reply URL. Contact [Honestly Client support team](mailto:[email protected]) to get these values. You can also refer to the patterns shown in the **Basic SAML Configuration** section.

1. Select **Set additional URLs** and perform the following step if you wish to configure the application in **SP** initiated mode:

In the **Sign-on URL** text box, type a URL:
`https://webapp.honestly.de/sso`

1. On the **Set up single sign-on with SAML** page, in the **SAML Signing Certificate** section, find **Certificate (Base64)** and select **Download** to download the certificate and save it on your computer.
<a name='configure-honestly-sso'></a>

![The Certificate download link](common/certificatebase64.png)
## Configure Honestly SSO

1. On the **Set up Honestly** section, copy the appropriate URL(s) based on your requirement.
1. Go to the **Honestly SSO** page in your Honestly account.

a. In the **Your provider's SSO URL** text box, type your **Login URL** with the following pattern:
`https://login.microsoftonline.com/<client-id>/saml2`

b. In the **Your provider's Entity ID** text box, type your **Microsoft Entra Identifier** with the following pattern:
`https://sts.windows.net/<client-id>/`

You can find both of these values on the **Set up single sign-on with SAML** page in Azure und der the **Set up Honestly section**
![Copy configuration URLs](common/copy-configuration-urls.png)
<a name='create-an-azure-ad-test-user'></a>

1. On the **Set up single sign-on with SAML** page, in the **SAML Signing Certificate** section, find **Certificate (Base64)** and select **Download** to download the certificate and save it on your computer.

![The Certificate download link](common/certificatebase64.png)

1. Open the certificate in any text editor.
1. Copy everything, including the *-----BEGIN CERTIFICATE-----* and *-----END CERTIFICATE-----* tags and the beginning and end of the file.
1. Paste it into the **x509 Certificate** field on the **Honestly SSO** page in your Honestly account.
1. You can enable the checkbox at the bottom of the page in order to fall back to the reglular login in case anything went wrong and click on save.

### Create a Microsoft Entra test user

Expand Down Expand Up @@ -138,13 +157,12 @@ In this section, you enable B.Simon to use single sign-on by granting access to
1. If you're expecting any role value in the SAML assertion, in the **Select Role** dialog, select the appropriate role for the user from the list and then select the **Select** button at the bottom of the screen.
1. In the **Add Assignment** dialog, select the **Assign** button.

## Configure Honestly SSO

To configure single sign-on on **Honestly** side, you need to send the downloaded **Certificate (Base64)** and appropriate copied URLs from the application configuration to [Honestly support team](mailto:[email protected]). They set this setting to have the SAML SSO connection set properly on both sides.

<a name='create-honestly-test-user'></a>

### Create Honestly test user

In this section, you create a user called Britta Simon in Honestly. Work with [Honestly support team](mailto:[email protected]) to add the users in the Honestly platform. Users must be created and activated before you use single sign-on.
In this section, you create a user called Britta Simon in Honestly. Work with [Honestly support team](mailto:[email protected]) to add the users in the Honestly platform. Users must be created and activated before you use single sign-on.

## Test SSO

Expand Down