SSO - Single Sign-On

Set up SAML 2.0 single sign-on for Bilendo, using Microsoft Entra ID as an example.

Bilendo supports SSO via SAML 2.0. After setup, your users sign in with their existing company account (Entra ID, Okta, SAP Cloud Identity, etc.), with no Bilendo password.

Prerequisites: Admin access to your IdP · Support from your Bilendo contact · SSO is enabled per company and per user, so individual users can continue to sign in with a password.

Good to know: Login is SP-initiated. Your users always start it from the Bilendo login page, not from the app tile in the IdP portal. Roles are still assigned manually in Bilendo. There is currently no role mapping via SAML.

Step 1: Receive the values from Bilendo

Your Bilendo contact will provide you with two company-specific values:

FieldPurpose
ACS URLDestination URL for the SAML response from your IdP
Entity IDIdentifier that Bilendo uses to identify itself to your IdP

Step 2: Create an enterprise application in Entra ID

  1. entra.microsoft.com → Enterprise applications → Manage → All applications → + New application

image.png

  1. + Create your own application

image.png

  1. Enter a name (e.g., "Bilendo") → "Integrate any other application you don't find in the gallery"

image.png

  1. Manage → Single sign-on → SAML

image.png

  1. Under Manage → Properties, configure the details

image.png

Step 3: Enter the ACS URL and Entity ID

  1. Manage → Single sign-on → Under “Basic SAML Configuration”, click “Edit” and add the following information:

image.png

Step 4: Edit Attributes & Claims

  1. Attributes & Claims → Edit

  2. Replace the existing information with the following:

image.png

Step 5: Create Groups and Assign Them to the Application

So that not every employee automatically has access to the application, login is controlled through groups. Only users assigned to these groups will later be able to sign in to Bilendo via SSO.

  1. Navigate to Manage → Groups → All groups and click New group

image.png

  1. Select Security as the type, add a name (e.g., "App-Bilendo-Users"), and create the group

  2. Add the desired users

  3. Go back to your newly created Bilendo enterprise application

  4. Navigate to Manage → Users and groups.

  5. Click + Add user/group.

image.png

  1. Select the group you created earlier and click Assign at the bottom.

Step 6: Download the certificate

Scroll down to "SAML Certificates" → Certificate (Base64) → Download.

Good to know: Renew the certificate before it expires and upload the new one to Bilendo. Otherwise, login will fail.

Step 7: Send the values to Bilendo

  1. Scroll down further and copy “Login URL”, “Microsoft Entra Identifier”, and “Logout URL”.

image.png

  1. Send the values and the certificate to your Bilendo contact

Special considerations for Azure AD:

  • For the SAML Issuer, the application ID must be prefixed with spn: