Skip to main content

Single Sign On Azure AD Quick Start

Set up ToolWatch as an enterprise application in Microsoft Entra ID (Azure AD) so your users can sign in to ToolWatch with single sign-on.

Use these steps to set up ToolWatch as an enterprise application in Microsoft Entra ID (formerly Azure AD). When you finish, your users can sign in to ToolWatch with single sign-on.

  1. Open a web browser and go to https://portal.azure.com.

  2. Under Azure services, select Microsoft Entra ID.

  3. In the left menu, under Manage, select Enterprise applications.

  4. Select New application.

  5. Select Create your own application.

  6. In What's the name of your app?, enter ToolWatch.

  7. Select Integrate any other application you don't find in the gallery (Non-gallery).

  8. Select Create.

  9. Under Getting Started, select 2. Set up single sign on.

  10. Select SAML.

  11. In Basic SAML Configuration, select Edit.

  12. Under Identifier (Entity ID), select Add identifier.

  13. Under Reply URL (Assertion Consumer Service URL), select Add reply URL.

  14. In the Identifier (Entity ID) field, paste this URL: https://cloud.toolwatch.com/login/sso/saml2/metadata

  15. In the Reply URL (Assertion Consumer Service URL) field, paste this URL: https://cloud.toolwatch.com/login/sso/saml2/consume

  16. In the Logout Url (Optional) field, paste this URL: https://cloud.toolwatch.com/login/sso/saml2/logout

  17. Select Save.

  18. In SAML Certificates, next to Certificate (Base64), select Download.

  19. In Set up ToolWatch, select the copy icon next to Login URL and next to Microsoft Entra Identifier.

  20. Send the certificate file from step 18 and the 2 values from step 19 to your ToolWatch Implementation representative. If your implementation is finished, send them to your CSM.


If you are using just-in-time user creation (with role or stock-location assignment) or sharing this identity provider across multiple ToolWatch organizations, also add the ToolWatch custom

claims under "Attributes & Claims": user_role, stock_location, and/or org_id. Microsoft Entra ID does not send these by default. See Single Sign On SAML Setup for what each claim controls.

After ToolWatch receives this information, the single sign-on integration is complete. Users must have access to the ToolWatch application in Microsoft Entra ID before they can sign in to ToolWatch.

To open the ToolWatch application again later, select Home, and then select Microsoft Entra ID. Then select Enterprise applications and select ToolWatch.


Screenshots for Setting Up ToolWatch Single Sign On in Microsoft Entra ID (Azure AD)

Did this answer your question?