SureMDM

Settings

Description

Enable Single Sign-On

Select this option to allow configuring Single Sign-On settings.

SSO Type

Select Azure AD.

Service Identifier

Enter the Service Identifier. 

This value is present under EntityDescriptor tag, entityID property of metadata XML file. See step no.7, Configure settings in Azure AD server. 

For example: https://sts.windows.net/f7ecc730-6267-405e-910a-5eced15bcf21/

Sign On Service Url

Enter the Service Identifier Url. This value is present under <md:SingleSignOnService  (node with HTTP-Redirect binding) > Location.

Fetch these values from the certificate downloaded in step no.7, Configure settings in onelogin server. 

For example: https://login.microsoftonline.com/f7ecc730-6267-405e-910a-5eced15bcf21/saml2

Logout Service Url

Enter the URL for logout. Generally same as Sign on URL

For example: https://login.microsoftonline.com/f7ecc730-6267-405e-910a-5eced15bcf21/saml2

Roles

Choose an option for the Roles from the drop-down menu. To know more see Configure Permissions for Role-Based Admin.

Device Group Set

Choose an option for Device Group Set from the drop-down menu. To know more, see Configure Permissions for Device Group Set Based Admin.

Jobs/Profiles Folder Set

Choose an option for Device Group Set from the drop-down menu. To know more, see Configure Permissions for Job Folder Set Based Admin.