Skip to main content

[Feature Coming Soon] Setting Up Rubii SSO via Microsoft Entra - Existing Tenants ▶️

Updated

This process assumes you already have a Rubii account and are integrating it with a new Microsoft Entra application for SSO. 

I. Rubii Setup

  1. Login to Rubii.
  2. Go to the Data Sources Page.
  3. Look for Microsoft Entra (or Azure AD).
  4. Click on the Logo. You will see the setup steps and likely a video guide.

II. Microsoft Entra ID (Azure AD) App Registration

  1. Login to Microsoft Entra admin center.
  2. Find App Registrations.
  3. Click New Registration.
  4. Leave other fields as default (Default is Single Tenant Only). Click Register.
  5. Open the newly registered application's details.

III. Generating the Client Secret

  1. Open Certificates and Secrets.
  2. Click New Client Secret.
  3. Set the desired Expiry for the secret (the duration depends on your organization's policy).
  4. Click Add.
  5. The secret value will be displayed immediately after creation. Copy the secret value and store it securely. Once you leave the page, the secret value will be masked and you will not be able to retrieve it again.

IV. Retrieving Entra Credentials

  1. Click Overview in the app registration.
  2. Note down the following essential details:
    • Application (client) ID
    • Directory (tenant) ID
    • Client Secret (from the previous step)

V. Completing Rubii Connection

  1. Go back to Rubii.
  2. Once you have the three details above (Client ID, Tenant ID, Secret), click "I am ready" to start the connection process.
  3. Setup SSO Domain: Enter your preferred SSO domain (e.g., yourcompany.rubii.com).
  4. Enter Entra Credentials: Input the Tenant ID, Client ID, and Client Secret you retrieved.
  5. The Rubii process should complete, and you will be provided with the Callback URL (sometimes called Redirect URI).

VI. Adding the Callback URL to Entra

  1. Go back to your App Registration in Microsoft Entra.
  2. In the left navigation, click Authentication (or find Redirect URI).
  3. Click Add a platform and select Web.
  4. In the Redirect URIs field, Add the Callback URL provided by Rubii in step 21.

VII. Managing User Access (Optional but Recommended)

This step ensures that only authorized users can access Rubii via SSO.

  1. Go to Enterprise Applications in Microsoft Entra.
  2. Find your Rubii application and click Properties.
  3. Set Assignment Required to Yes.
    • Note: If a user is a Global Administrator, they can bypass this restriction.
  4. Recommendation: Create a new role in Entra specifically for Rubii users. Assign users to this role and then assign the role to the Rubii Enterprise App.
  5. Go to Users and Groups in the Enterprise App and Add the users/groups who should have access.

VIII. User Login

  1. Use the link provided by Rubii (usually found in step 2 of the Rubii setup) to share with your organization for logging in via Entra SSO.

Related articles