Single Sign-on (SSO)

Before you follow this guide, configure SSO in your Azure / Entra ID environment. Now that you have gathered all of the required information, you can configure PADS4 CMS to use SSO.

​

Important

For SSO to function correctly, configure PADS4 to use HTTPS with an SSL certificate.

​

Step 1: Navigate to your PADS4 CMS instance in a browser

Sign in with an Administrator account and select “CMS Admin”.

​

Step 2: Select “Plugins” in the left pane, then “Single Sign-on (SSO)”

Enable the plugin on the top right. Next to “Type”, select the “Azure AD” option in the drop-down list.

​

Step 3: Insert the information obtained from the previous section

​

Important

In the CMS SSO configuration, the “URL of the relying party” must end with “/crystal/pads”. Remove the “/Saml2” suffix that Azure includes in the copied string. Here, “pads” is the default domain. For example, the link copied from Azure looks like this: https://robin.pads365.com/crystal/pads/Saml2 However, it should look like this instead: https://robin.pads365.com/crystal/pads

​

Step 4: Upload the Application Certificate (Raw) that you have downloaded from Azure

For the “relying party signing certificate”, use the certificate from your HTTPS configuration (recommended). Convert that certificate to .pfx.

​

Configure the certificate and private key

When you configure the “Relation Table” in CMS Admin for SSO, set a profile that you created for the SSO users or group in relation to their privilege level. Example below: Save the configuration, then sign out. You should now see the “Single Sign On” option below:

​

Important notes

1. When your SSL certificate expires, upload the new certificate and private key in this section upon renewal.
2. When your federation certificate expires, upload the new certificate and private key in this section upon renewal.