|
| 1 | +--- |
| 2 | +title: Azure Active Directory SSO integration with Proactis Rego Source-to-Pay |
| 3 | +description: Learn how to configure single sign-on between Azure Active Directory and Proactis Rego Source-to-Pay. |
| 4 | +services: active-directory |
| 5 | +author: jeevansd |
| 6 | +manager: CelesteDG |
| 7 | +ms.reviewer: CelesteDG |
| 8 | +ms.service: active-directory |
| 9 | +ms.subservice: saas-app-tutorial |
| 10 | +ms.workload: identity |
| 11 | +ms.topic: how-to |
| 12 | +ms.date: 03/09/2023 |
| 13 | +ms.author: jeedes |
| 14 | + |
| 15 | +--- |
| 16 | + |
| 17 | +# Azure Active Directory SSO integration with Proactis Rego Source-to-Pay |
| 18 | + |
| 19 | +In this article, you learn how to integrate Proactis Rego Source-to-Pay with Azure Active Directory (Azure AD). Proactis Rego is a powerful Source-to-Pay software platform designed for mid-market organizations. It's easy to use and integrate, giving you control over your spend and supply-chain risks. When you integrate Proactis Rego Source-to-Pay with Azure AD, you can: |
| 20 | + |
| 21 | +* Control in Azure AD who has access to Proactis Rego Source-to-Pay. |
| 22 | +* Enable your users to be automatically signed-in to Proactis Rego Source-to-Pay with their Azure AD accounts. |
| 23 | +* Manage your accounts in one central location - the Azure portal. |
| 24 | + |
| 25 | +You are able to configure and test Azure AD single sign-on for Proactis Rego Source-to-Pay in a test environment. Proactis Rego Source-to-Pay supports **SP** initiated single sign-on. |
| 26 | + |
| 27 | +## Prerequisites |
| 28 | + |
| 29 | +To integrate Azure Active Directory with Proactis Rego Source-to-Pay, you need: |
| 30 | + |
| 31 | +* An Azure AD user account. If you don't already have one, you can [Create an account for free](https://azure.microsoft.com/free/?WT.mc_id=A261C142F). |
| 32 | +* One of the following roles: Global Administrator, Cloud Application Administrator, Application Administrator, or owner of the service principal. |
| 33 | +* An Azure AD subscription. If you don't have a subscription, you can get a [free account](https://azure.microsoft.com/free/). |
| 34 | +* Proactis Rego Source-to-Pay single sign-on (SSO) enabled subscription. |
| 35 | + |
| 36 | +## Add application and assign a test user |
| 37 | + |
| 38 | +Before you begin the process of configuring single sign-on, you need to add the Proactis Rego Source-to-Pay application from the Azure AD gallery. You need a test user account to assign to the application and test the single sign-on configuration. |
| 39 | + |
| 40 | +### Add Proactis Rego Source-to-Pay from the Azure AD gallery |
| 41 | + |
| 42 | +Add Proactis Rego Source-to-Pay from the Azure AD application gallery to configure single sign-on with Proactis Rego Source-to-Pay. For more information on how to add application from the gallery, see the [Quickstart: Add application from the gallery](../manage-apps/add-application-portal.md). |
| 43 | + |
| 44 | +### Create and assign Azure AD test user |
| 45 | + |
| 46 | +Follow the guidelines in the [create and assign a user account](../manage-apps/add-application-portal-assign-users.md) article to create a test user account in the Azure portal called B.Simon. |
| 47 | + |
| 48 | +Alternatively, you can also use the [Enterprise App Configuration Wizard](https://portal.office.com/AdminPortal/home?Q=Docs#/azureadappintegration). In this wizard, you can add an application to your tenant, add users/groups to the app, and assign roles. The wizard also provides a link to the single sign-on configuration pane in the Azure portal. [Learn more about Microsoft 365 wizards.](/microsoft-365/admin/misc/azure-ad-setup-guides). |
| 49 | + |
| 50 | +## Configure Azure AD SSO |
| 51 | + |
| 52 | +Complete the following steps to enable Azure AD single sign-on in the Azure portal. |
| 53 | + |
| 54 | +1. In the Azure portal, on the **Proactis Rego Source-to-Pay** application integration page, find the **Manage** section and select **single sign-on**. |
| 55 | +1. On the **Select a single sign-on method** page, select **SAML**. |
| 56 | +1. On the **Set up single sign-on with SAML** page, select the pencil icon for **Basic SAML Configuration** to edit the settings. |
| 57 | + |
| 58 | +  |
| 59 | + |
| 60 | +1. On the **Basic SAML Configuration** section, perform the following steps: |
| 61 | + |
| 62 | + a. In the **Identifier** textbox, type a URL using one of the following patterns: |
| 63 | + |
| 64 | + | **Identifier** | |
| 65 | + |---------| |
| 66 | + | `https://consult.esize.nl/domain/<domainId>` | |
| 67 | + | `https://start.esize.nl/domain/<domainId>` | |
| 68 | + | `https://bsmuk-uat.proactiscloud.com/domain/<domainId>` | |
| 69 | + | `https://bsmuk.proactiscloud.com/domain/<domainId>` | |
| 70 | + | `https://pxus-con.proactiscloud.com/domain/<domainId>` | |
| 71 | + | `https://bsmus.proactiscloud.com/domain/domainId` | |
| 72 | + |
| 73 | + b. In the **Reply URL** textbox, type a URL using one of the following patterns: |
| 74 | + |
| 75 | + | **Reply URL** | |
| 76 | + |---------| |
| 77 | + | `https://consult.esize.nl/saml/domain/<domainId>/login` | |
| 78 | + | `https://start.esize.nl/saml/domain/<domainId>/login` | |
| 79 | + | `https://bsmuk-uat.proactiscloud.com/saml/domain/<domainId>/login` | |
| 80 | + | `https://bsmuk.proactiscloud.com/saml/domain/<domainId>/login` | |
| 81 | + | `https://pxus-con.proactiscloud.com/saml/domain/<domainId>/login` | |
| 82 | + | `https://bsmus.proactiscloud.com/saml/domain/<domainId>/login` | |
| 83 | + |
| 84 | + c. In the **Sign on URL** textbox, type a URL using one of the following patterns: |
| 85 | + |
| 86 | + | **Sign on URL** | |
| 87 | + |---------| |
| 88 | + | `https://consult.esize.nl/saml/domain/<domainId>` | |
| 89 | + | `https://start.esize.nl/saml/domain/<domainId>` | |
| 90 | + | `https://bsmuk-uat.proactiscloud.com/saml/domain/<domainId>` | |
| 91 | + | `https://bsmuk.proactiscloud.com/saml/domain/<domainId>` | |
| 92 | + | `https://pxus-con.proactiscloud.com/saml/domain/<domainId>` | |
| 93 | + | `https://bsmus.proactiscloud.com/saml/domain/<domainId>` | |
| 94 | + |
| 95 | + > [!Note] |
| 96 | + > These values are not real. Update these values with the actual Identifier, Reply URL and Sign on URL. Contact [Proactis Rego Source-to-Pay support team](mailto:[email protected]) to get these values. You can also refer to the patterns shown in the **Basic SAML Configuration section** in the Azure portal. |
| 97 | + |
| 98 | + 1. On the **Set up single sign-on with SAML** page, in the **SAML Signing Certificate** section, find **Certificate (PEM)** and select **Download** to download the certificate and save it on your computer. |
| 99 | + |
| 100 | +  |
| 101 | + |
| 102 | +1. On the **Set up Proactis Rego Source-to-Pay** section, copy the appropriate URL(s) based on your requirement. |
| 103 | + |
| 104 | +  |
| 105 | + |
| 106 | +## Configure Proactis Rego Source-to-Pay SSO |
| 107 | + |
| 108 | +To configure single sign-on on **Proactis Rego Source-to-Pay ** side, you need to send the downloaded **Certificate (PEM) ** and appropriate copied URLs from Azure portal to [Proactis Rego Source-to-Pay support team ](mailto:[email protected]). They set this setting to have the SAML SSO connection set properly on both sides |
| 109 | + |
| 110 | +### Create Proactis Rego Source-to-Pay test user |
| 111 | + |
| 112 | +In this section, you create a user called Britta Simon at Proactis Rego Source-to-Pay. Work with [Proactis Rego Source-to-Pay support team ](mailto:[email protected]) to add the users in the Proactis Rego Source-to-Pay platform. Users must be created and activated before you use single sign-on. |
| 113 | + |
| 114 | +## Test SSO |
| 115 | + |
| 116 | +In this section, you test your Azure AD single sign-on configuration with following options. |
| 117 | + |
| 118 | +* Click on **Test this application** in Azure portal. This will redirect to Proactis Rego Source-to-Pay Sign-on URL where you can initiate the login flow. |
| 119 | + |
| 120 | +* Go to Proactis Rego Source-to-Pay Sign-on URL directly and initiate the login flow from there. |
| 121 | + |
| 122 | +* You can use Microsoft My Apps. When you click the Proactis Rego Source-to-Pay tile in the My Apps, this will redirect to Proactis Rego Source-to-Pay Sign-on URL. For more information about the My Apps, see [Introduction to the My Apps](../user-help/my-apps-portal-end-user-access.md). |
| 123 | + |
| 124 | +## Next steps |
| 125 | + |
| 126 | +Once you configure Proactis Rego Source-to-Pay you can enforce session control, which protects exfiltration and infiltration of your organization’s sensitive data in real time. Session control extends from Conditional Access. [Learn how to enforce session control with Microsoft Cloud App Security](/cloud-app-security/proxy-deployment-aad). |
0 commit comments