Who can use this feature?
Available on Enterprise plan.
Accessible to Owners and Admins on Web App.
To enable Single Sign-On (SSO) functionality for your Alohi applications, Fax.Plus or Sign.Plus, via Microsoft Entra ID, facilitating seamless access for your team members directly from their Entra ID dashboard to Fax.Plus or Sign.Plus, it's essential that you possess administrative rights for both Fax.Plus/Sign.Plus and Microsoft Azure.
Step 1: Adding the Alohi App on Microsoft Entra ID
- Sign in to your Azure portal.
- Navigate to the Microsoft Entra ID section.
- Select Enterprise applications and then click on New application.
- Search for the Alohi SSO application and add it to your directory.
- Within the Alohi application settings, set up "Single sign-on" and choose SAML as the method.
- In the Basic SAML Configuration section, make sure the data is saved as follows:
-
- Identifier (Entity ID): https://sso.alohi.com/metadata
- Reply URL (Assertion Consumer Service URL): https://sso.alohi.com/login
-
- Obtain and note down the following information that will be needed in the next steps:
-
- Login URL
- Microsoft Entra Identifier
- Certificate (Base64)
-
Step 2: Configuring SSO on Fax.Plus or Sign.Plus
- Login to your Fax.Plus account, and go to the Settings section on your dashboard.
- Find the tab for Security, and look for the box for Access Management.
- To the right of Single Sign-On (SSO), click on Activate.
- Input Entra ID-provided details like Login URL and Certificates into Fax.Plus or Sign.Plus.
-
- Fill in the Single Sign-On URL section with the new Login URL from the previous step.
- Fill in the Entity ID with the Microsoft Entra Identifier from the previous step.
- Add the Base64 Certificate* text in the section X.509 Certificate.
*To get the Certificate (Base64), click on Download. Open the certificate with MS Word or TextEditor.
-
- Select “Alohi SSO” as the SSO Type
- Finally, press Next
Step 3: Set up Automatic User Provisioning
- On the next screen, ensure “Automatically add new users to Fax.Plus” or “Automatically add new users to Sign.Plus” is checked in so that the users you assign via Azure are automatically created on Fax.Plus or Sign.Plus.
- Users can also be added to Sign.Plus accordingly if you use our eSignature solution.
- You can keep the Tenant URL and SCIM Token ready to copy, as they will be needed in the next step.
- Back on your Entra ID portal, select "Provisioning".
- Select Get Started, and set the mode to Automatic.
- Then paste the Tenant URL and SCIM Token that you retrieved from the Fax.Plus dashboard.
- You can test the connection to verify that the flow is correct and Save.
Step 4: Assign your users
- In the Entra ID portal, on the configuration of the Alohi SSO integration, select “assign users and group”.
- To add additional users, click on Add user/group so the new accounts can be created accordingly through the automatic user provisioning.
- They will now be able to log in to their Fax.Plus account through the Alohi SSO integration.
Benefit: By setting up the Alohi SSO, you streamline your access mechanisms to both Fax.Plus and Sign.Plus, thereby ensuring a more secure and efficient document management system for your organization.