SSO with Microsoft Entra ID

Overview

Integrate Treblle with Microsoft Entra ID (formerly Azure Active Directory) to enable secure Single Sign-On for your team. This guide walks you through configuring SAML-based authentication between Microsoft Entra ID and Treblle.

Prerequisites

Before you begin, ensure you have:

Configuration Process

The SSO setup process involves two main steps:

1. Configure an Enterprise Application in Microsoft Entra ID
2. Configure SSO settings in Treblle

Part 1: Microsoft Entra ID Configuration

Step 1: Access Microsoft Entra ID Portal

1. Navigate to the Azure Portal 
2. Go to Microsoft Entra ID (formerly Azure Active Directory)

3. Select Enterprise Applications from the left sidebar

Step 2: Create Enterprise Application

1. Click + New application at the top of the Enterprise Applications page

2. Select Create your own application

3. In the dialog that appears:

   • Name: Enter Treblle SSO Test (or your preferred name)
   • Option: Select Integrate any other application you don’t find in the gallery (Non-gallery)

4. Click Create

Step 3: Set Up Single Sign-On

1. After creating the application, you’ll be redirected to the application overview page
2. From the Getting Started section, click 2. Set up single sign on
3. Select SAML as the single sign-on method

Step 4: Configure Basic SAML Settings

In the Basic SAML Configuration section, click Edit and configure the following:

Required Fields

Optional Fields

• Sign on URL: Leave empty (optional)
• Relay State: Leave empty (optional)
• Logout URL: Leave empty (optional)

Click Save after entering the required information.

Step 5: Review Attributes & Claims

The default attributes should work correctly. Microsoft Entra ID will map these attributes:

Step 6: Download SAML Certificate

In the SAML Certificates section:

1. Locate Certificate (Base64)
2. Click Download to save the certificate file

Step 7: Copy Configuration URLs

In the Set up [Your App Name] section, copy the following values:

Part 2: Treblle Configuration

Step 8: Access Treblle Authentication Settings

1. Log in to your Treblle workspace as a workspace owner
2. Navigate to Settings → Authentication
3. The authentication configuration page will appear

Step 9: Configure SSO in Treblle

Fill in the following fields with the information from Microsoft Entra ID:

Company Email Identifier

Enter the unique identifier for your organization:

treblle-entra-id

Authentication Type

Select SAML from the dropdown menu.

Assertion Consumer Service URL

Enter the callback URL:

[your-identifier]

Identity Provider Issuer

Paste the Microsoft Entra Identifier URL you copied from Azure. It should look like:

https://sts.windows.net/[your-tenant-id]/

Identity Provider Certificate

1. Open the downloaded Certificate (Base64) file in a text editor
2. Copy the entire contents including the header and footer:

   -----BEGIN CERTIFICATE-----
   [certificate content]
   -----END CERTIFICATE-----

3. Paste it into the Identity Provider Certificate field in Treblle

Step 10: Enable SSO Login

Check the box Enable SSO Login at the bottom of the form.

This will activate SSO for your workspace once you save the configuration.

Step 11: Save Configuration

Click Save Authentication to apply your SSO settings.

Part 3: Testing SSO

Step 12: Test in Azure Portal

Before rolling out to your team, test the SSO configuration:

1. Go back to your Enterprise Application in Azure Portal
2. Navigate to Single sign-on settings
3. Scroll to Test single sign-on with [Your App Name]
4. Click Test sign in

Step 13: Verify SSO in Treblle

After saving your configuration, you should see your SSO configuration listed in Treblle:

• Configuration Name: treblle-entra-id
• Status: Single Sign-On is enabled for this workspace

Part 4: User Login Flow

Step 14: Sign In with SSO

Once SSO is configured, users can sign in via SSO:

1. Go to https://identity.treblle.com/login 
2. Click Sign in with SSO
3. Enter your organization’s identifier

4. Enter your organization identifier: treblle-entra-id
5. Click Continue
6. You’ll be redirected to Microsoft login
7. Authenticate with your Microsoft credentials
8. You’ll be redirected back to Treblle and logged in

User Assignment in Microsoft Entra ID

Before users can sign in, you must assign them to the application:

1. In Azure Portal, go to your Enterprise Application
2. Click Users and groups from the left menu
3. Click + Add user/group
4. Select users or groups to grant access
5. Click Assign

Managing SSO Configuration

Updating SSO Settings

To update your SSO configuration:

1. In Treblle, navigate to Settings → Authentication
2. Click Update on your SSO configuration
3. Modify the necessary fields
4. Click Save Authentication

Disabling SSO

To temporarily disable SSO:

1. Go to Settings → Authentication in Treblle
2. Uncheck Enable SSO Login
3. Click Save Authentication

Deleting SSO Configuration

To completely remove SSO:

1. Go to Settings → Authentication in Treblle
2. Click Delete on your SSO configuration
3. Confirm the deletion