Set up single sign-on with Microsoft Entra (formerly Azure AD)

Prerequisites

Administrator access on Peakon and Microsoft Entra.

Context

You can set up single sign-on (SSO) so your employees can sign into Peakon using their Microsoft Entra credentials. See Single sign-on overview for more general information.

Steps

1. Enable SSO in Peakon. 
   1. Go to Administration > Integrations > Single Sign-On.
   2. Click Connect. The page will now display SSO configuration fields. You will reference or add information to this page in steps 4-6.
2. Add Peakon to your list of managed SaaS apps from the gallery in Microsoft Entra.
3. After adding the Peakon app, select Single Sign-On in Microsoft Entra.
4. Select SAML as the single sign on method in Microsoft Entra, go to the Basic SAML Configuration section and enter the following values:
   • Enter the values from the Entry ID field in Peakon into the Identifier field in Microsoft Entra.
   • Enter the values from the Reply URL (ACS) field in Peakon into the Reply URL field in Microsoft Entra.

     Warning

     Peakon is deprecating the legacy app.peakon.com domain and replacing it with a unique subdomain per customer. Ensure that your SSO configuration reflects your organization's subdomain before August 2024. See more: Workday Peakon legacy domain retirement.

5. Download Certificate (Raw) from the SAML Signing Certificate section in Microsoft Entra and enter it into the Certificate field on Peakon.
6. From the Set up Peakon section in Microsoft Entra, enter these values into Peakon:
   • Login URL into the SSO Log-in URL field on Peakon.
   • Logout URL into the SSO Log-out URL (Optional) field on Peakon.
7. Test single sign-on:
   1. Sign out of Peakon, then sign back in using your work email address and continue.
   2. Peakon should redirect you to the single sign-on page in Microsoft Entra, then redirect back to Peakon.