The Business Insights service supports identity provider (IdP)-initiated SAML authentication for admins. Admins can log in to the Business Insights Admin Portal directly from a single sign-on (SSO) provider's portal by clicking the Business Insights application icon. This guide illustrates how to configure SAML SSO with Microsoft Entra ID for the Business Insights service.

Prerequisites

Ensure that you have the following before you start configuring Microsoft Entra ID:

• An Microsoft Entra ID account with admin privileges.
• Admins created for Business Insights service in Microsoft Entra ID.

Configuring SAML SSO with Microsoft Entra ID

To configure Microsoft Entra ID SAML SSO for Business Insights:

• 1. Create Business Insights app (SAML configuration) in Microsoft Entra ID.

  To add the Business Insights application to Microsoft Entra ID:

  1. Log in to the Microsoft Entra portal.
  2. Go to Identity > Applications > Enterprise applications from the left-side navigation.
     See image.

     

     Close

  3. Click New application, then click Create your own application.

     The Create your own application window appears.

  4. In the Create your own application window:

     1. Enter an application name for the Business Insights service in the What's the name of your app? field. For example, enter Business Insights.
     2. Select the Integrate any other application you don't find in the gallery (Non-gallery) option.
     3. Click Create.

     See image.

     

     Close

     The Microsoft Entra ID service displays a notification that the application is added, and you are redirected to the application's Overview page.

  5. From the left-side navigation, click Single sign-on, then click SAML.
     See image.

     

     Close

     The Set up Single Sign-on with SAML page appears.

  6. In the Basic SAML Configuration section, click Edit and complete the following fields:

     1. Identifier (Entity ID): Enter the entity ID. You can find this information by downloading the XML metadata file from the Download XML Metadata field on the Administrator Management page (Administration > Administrator Management) in the Business Insights Admin Portal. This ID is specific to your IdP.

        See image.

        

        Close

     2. Reply URL (Assertion Customer Service URL): Enter the Reply URL. You can find this information by downloading the XML metadata file from the Download XML Metadata field on the Administrator Management page (Administration > Administrator Management) in the Business Insights Admin Portal.

        See image.

        

        Close

     3. Relay State: Enter your Business Insights cloud name. You can view the cloud from the My Profile page in the Business Insights Admin Portal.

        See image.

        

        Close

     4. Click Save and exit the window.

  See image.

  

  Close

  Close
• 2. Assign admins to Business Insights.

  To assign admins to the Business Insights application:

  1. From the left-side navigation, go to Identity > Applications > Enterprise applications.
  2. Search for and open the Business Insights application.
  3. From the left-side navigation, click Users and groups, then click Add user/group.
     See image.
     Close

  The Users and groups window appears.

  4. Search for the user or group you want to assign to the Business Insights service.
  5. Select the checkbox next to the user or group names you want to assign to the Business Insights service, then click Select.
     See image.

     

     Close
  6. In the Add Assignment panel, click Assign.

  See image.

  

  Close

  You are redirected to the Users and groups page where you can see the users are successfully assigned to Business Insights.

  See image.

  

  Close

  Close
• 3. Download the SAML signing certificate from Microsoft Entra ID.

  To download the SAML signing certificate:

  1. From the left-side navigation, go to Identity > Applications > Enterprise applications.
  2. Search for and open the Business Insights application.

  3. From the left-side navigation, click Single sign-on, then click SAML.
     See image.

     

     Close

     The Set up Single Sign-on with SAML page appears.

  4. In the SAML Certificates section, click the download link next to the Certificate (Base64) field to obtain the Base64 certificate.

  See image.

  

  Close

  The certificate is downloaded to your system. Upload the certificate as part of Step 4 in the IdP SAML Certificate field.

  Close
• 4. Configure SAML SSO in the Business Insights Admin Portal.

After you complete the preceding steps, admins can access the Business Insights Admin Portal using their Microsoft Entra ID credentials or the Business Insights tile on their apps dashboard in the My Apps portal.

See image.

Close