Setting Up Single Sign-On with Entra ID (Formerly Azure AD)

💡 Please keep in mind that SSO with Holistiplan is Service Provider (SP) Initiated only. When you complete your setup on the Holistiplan side, a "Magic Link" will be generated for you. This is a direct SSO sign-on link that can be used in your Identity Provider to mimic an IDP initiated flow if desired. 

Entra ID Setup

1. Inside your Azure Console, navigate to the Microsoft Entra ID Service

2. On the next screen click Add and then select Enterprise Applications

3. Here select Create your our application and in the following modal, name the application (this can be anything, but preferably something to tie it to Holistiplan). Under "What are you looking to do with your application" make sure that Integrate any other application you don't find in the gallery (Non-gallery) is selected

4. On the subsequent page, select Set up single sign on

5. Next click on SAML

6. Next in the section labeled Basic SAML Configuration click on Edit

7. Here you will want to fill in the Entity ID and the Assertion Consumer Service URL as written and shown below. Then press save and exit out of the window.

Entity ID: https://app.holistiplan.com

Assertion Consumer Service URL: https://app.holistiplan.com/sso/complete/saml/

8. Next, under the section labeled Attributes & Claims, press Edit and make sure the information in the following window matches the following. Once confirmed feel free to exit out of this window 

9. Finally, under the section labeled SAML Certificates download the Federation Metadata XML. This will be used later during our the set up on the Holistiplan side. 

Please note: Because of the way SSO is implemented within Holistiplan, the Test feature within Entra ID will not return a success

This concludes the Entra ID portion of the SSO configuration. Now please log in to your Holistiplan app, where the rest of the set up will take place. 

Holistiplan Firm Admin Setup

• Log in to your Holistiplan application and navigate to
  Settings > Features & Tools > General

• Ensure that SSO Self Serve is enabled.

  

• Once enabled, click on Security in the left hand menu to find the SSO Configuration box where you can begin setup.

  

• Select Azure AD as your Identity Provider.

• Click on Azure AD Settings within the configuration box.

• Under Import from XML, upload the metadata file you downloaded from Okta.

  This will auto-populate the required fields. Review that the details appear correctly, then click Submit.

• Choose your preferred authentication option:

  • Enable SSO – Users can log in via SSO or with a password.

  • SSO Only (no passwords) – Users must log in through SSO exclusively.

  
  
  
  

After this your setup is complete! Feel free to log out and log back in via SSO.

If you're still experiencing any issue or having any trouble with this setup, reach out to support@holistiplan.com