To configure Equinox SSO via Entra ID:

  1. Log into the Entra admin center

  2. Navigate to Applications > Enterprise Applications

  3. Click New Application

  4. Click Create your own application

  5. Enter a name, for you to identify this application

  6. Select Integrate any other application you don’t find in the gallery (Non-gallery)

  7. Click Create

  8. Azure will create your application (this can take 1-2 minutes)

  9. Go to the “Single Sign on” tab and edit the "Basic SAML Configuration section" and enter the following:
    FieldValue
    Identifier
    		https://[SERVER-URL]/single-sign-on/www/module.php/saml/sp/metadata.php/default-sp
    Reply URL

    https://[SERVER-URL]/single-sign-on/www/module.php/saml/sp/saml2-acs.php/default-sp 


    Where [SERVER-URL] is your Equinox server address for example for our main UK server this would be www.workanyware.co.uk or for our European server would be europe.equinox-ipms.com

Your identifier and reply URL in Microsoft Entra should look like the image below:

 


Next you need to input the information Entra gives you back into Equinox. Login to Equinox and go to System > System Preferences > Single Sign On 

1. Copy the App Federation Metadata Url into the Metadata URL field on Equinox

2. Copy the Microsoft Entra identifier into the SSO IDP Name field on Equinox

3. Check the Enable SSO box in Equinox


4. Navigate to your login URL. This will be in the format of:  https://[SERVER]/login/[ORGREF]

For example: https://workanyware.co.uk/login/smithandco

(if you are unsure of your ORGREF please contact Equinox support for this) 

This is the primary link your organisation will use to login to Equinox, if your organisation uses a portal or managed browser bookmarks / home page / desktop shortcuts to access Equinox you might consider updating this URL once satisfied that your Single Sign On is working correctly. 


5. You'll see a bespoke login screen based on the options you set


Be sure to add any users or groups you want to be able to access Equinox to the application in Entra ID otherwise your users will get an error upon login.

You can add individuals, your entire organisation or groups for certain departments.


That's it! Your users should now be able to login via the Single Sign-On button provided they have an account already provisioned in Equinox that uses the same email address as their Entra account.