Set up SSO for Microsoft Entra (SAML)

Only available for Premium and Pro accounts.
Only account admins can perform this task.

On Perk, you can set up an SAML SSO integration with Microsoft Entra ID (formerly Azure Active Directory).

You must be an account admin on Perk and Microsoft Entra ID to configure a new SSO integration.

  1. Go to Settings > Integrations.
  2. Find the SSO integration and click Start set up.
  3. Select SAML and click New integration.
  4. Open Microsoft Entra ID, go to the Active Directory, and select Enterprise applications.
         
    Screenshot 2020-11-11 at 14.08.40.png
     
  5. Click New Application and search for TravelPerk.
  6. Enter a name for the app, then click Create.
  7. Open the newly created Getting Started section. Under Select a single sign-on method, enable the SSO, and click SAML.

    Screenshot 2020-11-11 at 20.13.41.png

Note: While the app appears with the name TravelPerk in the Microsoft Entra App Gallery, it is the one you need to use for Perk.

Perk configurations for Microsoft Entra ID

  1. Copy the SP entity URL and paste it into the Reply URL (Assertion Consumer Service URL) on Microsoft Entra ID.
  2. Copy the SP entity ID and paste it into the Identifier (Entity ID) on Microsoft Entra ID.
  3. In the Sign on URL, enter your Perk subdomain using the following format: https://{yourcompanyname}.perk.com.

    Screenshot 2020-11-18 at 09.31.43.png

    Screenshot 2020-11-11 at 20.15.08.png
     
  4. Next to User Attributes & Claims, click Edit and then click the attribute name to edit it. The Attributes must be exactly the same as the following table, including punctuation. 
  5. Once these steps are completed, Microsoft Entra ID will generate the IdP x509 certificate.
Claim name/Name Value/Source attribute
givenname user.givenname
surname user.surname
name user.userprincipalname
emailaddress user.userprincipalname
Unique User Identifier user.userprincipalname
image (23) (1).png


Screenshot 2021-01-26 at 18.37.20.png

image (24) (1).png

Microsoft Entra ID configurations for Perk

  1. Copy the Microsoft Entra ID AD Identifier from section 4 and paste it into the IdP entity ID on Perk.
  2. Copy the Login URL from section 4 and paste it into the IdP SSO service URL on Perk.

    copy-configuration-urls.png
     
  3. Copy the URL from the App Federation Metadata Url in section 3 and the SAML Sign In certificate, and paste it into your browser.
  4. Look for <X509Certificate></X509Certificate> and copy the text in between. This is your certificate.
  5. Once copied, paste it into the Idp x509 cert on Perk. In the browser, it will look similar to the screenshot below. We don’t need the <X509Certificate></X509Certificate> tags.

    Screenshot 2020-11-11 at 20.36.41.png

    Screenshot 2020-11-18 at 09.32.47.png
     
  6. On Perk, click Create integration.

Add employees to the Perk app on Microsoft Entra ID

You need to add your employees to the Perk app on Microsoft Entra ID before they can sign in.

  1. In the Microsoft Entra ID app overview page, go to Manage.
  2. Select Users and groups.
  3. Click Add user, and in the Add Assignment box, select Users and groups.
  4. In Users and groups, select the users you want to give access to Perk.
  5. Click Select.

If you have doubts about how to assign users to Perk from Microsoft Entra ID, see the Microsoft build guide.

Test your setup

  1. Open your browser in an incognito window.
  2. Go to the Perk subdomain you created - https://{yourcompanyname}.perk.com.
  3. If you can sign in with SSO through Microsoft Entra ID, your application was successfully set up.

Was this article helpful?