Hi all. We are looking to test Azure AD within Sugar using the guide here https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/sugarcrm-tutorial most of the guide makes sense however I'm struggling on the part which says: On the Basic SAML Configuration section, enter the values for the following fields: a. In the Sign-on URL text box, type a URL using the following pattern: https://<companyname>.sugarondemand.com https://<companyname>.trial.sugarcrm b. In the Reply URL text box, type a URL using the following pattern: https://<companyname>.sugarondemand.com/<companyname> https://<companyname>.trial.sugarcrm.com/<companyname> https://<companyname>.trial.sugarcrm.eu/<companyname> Our instance of Suagr is hosted internally, so we don't have a URL similar to what is shown in the reply URL. Is there anywhere in the code or any front end instance of where I can be sure I get the right URL? Thanks, Daniel

Hi Daniel, you should be ok by using this mechanism on your on-prem install. Please check the following KB article about and try to follow those steps... https://support.sugarcrm.com/Knowledge_Base/Password_Management/SAML_Authentication/Configuring_SSO_With_ADFS_in_Sugar_7.10_and_Higher/index.html hope this helps. rafa

Azure AD - Sign On Url and Reply URL for On Premise

Daniel Hill over 3 years ago

Hi all.

We are looking to test Azure AD within Sugar using the guide here https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/sugarcrm-tutorial most of the guide makes sense however I'm struggling on the part which says:

On the Basic SAML Configuration section, enter the values for the following fields:

a. In the Sign-on URL text box, type a URL using the following pattern:

https://<companyname>.sugarondemand.com
https://<companyname>.trial.sugarcrm

b. In the Reply URL text box, type a URL using the following pattern:

https://<companyname>.sugarondemand.com/<companyname>
https://<companyname>.trial.sugarcrm.com/<companyname>
https://<companyname>.trial.sugarcrm.eu/<companyname>

Our instance of Suagr is hosted internally, so we don't have a URL similar to what is shown in the reply URL. Is there anywhere in the code or any front end instance of where I can be sure I get the right URL?

Thanks,

Daniel

0 Rafael Fernandes over 3 years ago

Hi Daniel,

you should be ok by using this mechanism on your on-prem install.

Please check the following KB article about and try to follow those steps...

https://support.sugarcrm.com/Knowledge_Base/Password_Management/SAML_Authentication/Configuring_SSO_With_ADFS_in_Sugar_7.10_and_Higher/index.html

hope this helps.

rafa

SugarCRM | Principal Developer Advocate
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Reject Answer

Cancel
0 Daniel Hill over 3 years ago in reply to Rafael Fernandes

Hi Rafael, thanks for this. The link you provide is for ADFS rather than Azure AD, I know they are similar but seemingly azure asks for these specific URLs. Is it still that link that you'd recommend? I can't see the URLs on it that's all.

Thanks,
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Rafael Fernandes over 3 years ago in reply to Daniel Hill

Hi Daniel,

In theory, what you'd need is to pass on your Sugar URL from your public domain, let's say your Sugar instance is https://crm.danielhill.com so you'd provide for both, Sign-on URL and Reply URL, your domain URL.

An alternative solution would be to enable LDAPS on Azure (https://docs.microsoft.com/en-us/azure/active-directory-domain-services/tutorial-configure-ldaps) and configure it to work with sugar (https://support.sugarcrm.com/Knowledge_Base/Password_Management/LDAP_Authentication/Configuring_LDAP_Authentication_Using_Active_Directory/)

If that's not an option, I advise you to open a ticket with our support team, they might need to get into specifics of your setup...

Rafa

SugarCRM | Principal Developer Advocate
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Avi Orzech over 3 years ago

I've used this successfully

identifier - php-saml

Reply url https://<domain name> /sugarcrm

Sign on url - https://<domain name> /sugarcrm

givenname - user.givenname

surname - user.surname

emailaddress - user.mail

name - user.userprincipalname

Unique User Identifier - user.userprincipalname
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Daniel Hill over 3 years ago in reply to Rafael Fernandes

Perfect, thanks Rafael!
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Daniel Hill over 3 years ago in reply to Avi Orzech

That's great thanks Avi! Will try it
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel