SSO using SAML and Azure

To set up SSO for Younium using SAML and Microsoft Azure log into the Younium application as a System administrator and do the following:

1. Talk to your Younium CSM to ensure that SSO is part of your contract. Your Younium CSM needs to enable SSO for you. 
2. Enable the SSO permission by doing the following: Settings> Roles> System Administrator> Enable the permission Single sign on Settings under the section Security.
3. Log into Younium with a user that have System administrator permissions and do the following:
   1. Click on your name in the top right corner, select Privacy & Security
   2. Under Workspace select SSO and Setup SSO connection
   3. Under the SAML section select Azure
   4. Follow the wizard to complete the setup
   5. During the finalization steps the application will ask you to select a "Default SSO role". In this step it is important to select the role "Read Only" from the dropdown. Do not select any of the other roles. 
   6. Finalize the guide

User creation via identity provider is not supported. The user must be created in both Younium and your identity provider.