SAML Through Microsoft Azure

Instructions for Azure / Entra ID IdPs that are not federated

Credo Reference and Credo Source offer the ability to connect your Azure account for authentication.

You can communicate with support by sending us this form, or emailing [e-mail].

Please follow these steps to set it up:

1. Include the following entity ID and metadata to the IdPs list of whitelisted SPs:

   • SP Metadata URL:  https://sp.openathens.net/metadata-sp/credoreference.com/235ba2cc-44a1-44fa-a9a3-e9a434dd2930?hostedLogos=false

   • • SP Entity ID:  https://search.credoreference.com/oa/entity

2. Share your metadata URL and entity ID with Infobase ([e-mail]) or use our custom Google form to send us the information: https://forms.gle/pFiPcxSkD76Nm2sMA 

3. Ensure that the eduPersonScopedAffiliation attribute is released with the name  urn:oid:1.3.6.1.4.1.5923.1.1. 1.9 . This attribute specifies the person's affiliation within a particular security domain in broad categories such as student, faculty, staff, alum, etc. Example values of this attribute are: [e-mail], [e-mail]. The part before the @ signifies the affiliation of the user within the domain. The part after the @ can be the domain name. The full set of expected values in this attribute need to be shared with Infobase, to complete SAML setup on the account.

4. Ensure that the eduPersonTargetedID attribute is released with the name  urn:oid:1.3.6.1.4.1.5923.1.1. 1.9 . Ensure that this attribute is present in the SAML response.