Set Up Single Sign-On (SSO) with Azure AD/Entra

Your account must have a verified domain in order to set up and enable SSO. Review this article for instructions on verifying your domain. Review this article for instructions on verifying your domain.

Step 1: Create a new application on Entra ID

1. Log in to the Microsoft Azure Portal

2. Go to Microsoft Entra ID

3. Navigate to Enterprise applications > All applications

4. In the new page, select Create your own application

5. Type in name Nitro, select Integrate any application you don't find in the gallery and click Create (no template chosen)

6. Navigate to SAML SSO section on Nitro Productivity Pro

   1. Enter the following placeholder values:

      1. SAML Entity ID:urn:auth0:gonitro-prod:123

      2. ACS URL: https://auth.gonitro.com/login/callback?connection=123
         These will be updated later in Step 3.

7. Download the Base 64 Cert from Box 3

8. Copy Login URL from Box 4

Step 2: Set Up SAML SSO in the Nitro Admin Portal

1. Log in to the Nitro Admin Portal

2. From the left navigation pane, go to Settings, then navigate to the Single Sign-On tab

3. Click the Edit Configuration button

   

4. Paste the Login URL copied from Entra into the Sign-in URL field

5. Upload the Base 64 Cert downloaded from Entra into the X.509 Signing Certificate field

   

6. Click Submit and Enable SSO, then click Save
   

7. Copy the following values for use in the next step:

   • Entity ID

   • Reply URL 1

   • Reply URL 2

Step 3: Update SAML Settings in Entra

1. Go back to Microsoft Entra ID

   

2. Navigate to Enterprise applications > All applications > Nitro Productivity Suite

   

3. Under the Manage menu, click Single sign-on

4. Click Edit on Basic SAML Configuration

   

5. Update the placeholder values using the values copied from Nitro Admin:

   1. Paste SAML Entity ID to Identifier (Entity ID)

   2. Paste both Reply URL 1 and Reply URL 2 to under Reply URL (Assertion Consumer Service URL)
      
      

6. Save Changes