Configure Azure as a HyperComply SAML IDP

With HyperComply's ability for different SAML IDP configurations, it’s easier than ever to enable your team to authenticate into HyperComply within your SAML IDP provider instead of the usual email and password combination.

Process description:

This article will allow organizations to configure Azure as their SAML IDP for HyperComply by creating the required HyperComply Azure “Enterprise Application”. Any user that logs into HyperComply via Azure after completing this process will have an account created for them (if they don’t already have an account).

Prerequisites:

• Access to Azure Admin Portal and ability to add/configure custom SAML apps 
  • Note: If you are experiencing issues accessing Azure, please contact your Azure Admin or CSM as HyperComply has limited access
• Admin access for HyperComply
• Reach out to your CSM if you are not able to access the SAML configuration page in step 1

Gathering materials/resources:

How to contact your CSM:

• Email your CSM directly
  • If you are unsure who is your CSM, please contact HyperComply Support through our Support Request Portal here

Step-by-step instructions:

1. Navigate to the HyperComply SAML configuration page by clicking here or copy and paste the URL below into your browser:
   1. https://app.hypercomply.com/settings/saml_config
2. Copy the value of the “SAML ACS Endpoint” at the bottom of the screen
   1. Keep this tab open and complete the steps below, you will need to enter some values from OneLogin on this screen at the end of this process.
3. Open a new tab and log into your Azure Admin Portal
4. Navigate to the Azure Active Directory > Enterprise Applications settings page
5. Click New Application and then Create your own application
   1. Name the new application according to your normal naming convention or we recommend HyperComply as best practice
   2. Select Integrate any other application you don’t find in the directory
   3. Click Create
6. Navigate to Users and group in the left pane and assign yourself as a user to test the integration
7. Navigate to Single sign-on in the left pane and choose SAML
8. Click Edit for the Basic SAML Configuration section
   1. Add the SAML ACS Endpoint value you copied from HyperComply into the “Identifier (Entity ID)” and check the Default checkbox next to this value. 
      1. Note: If there is a default value in this field that was there when you opened the page, this can be deleted and replaced
   2. Also add the SAML ACS Endpoint value you copied from HyperComply into the “Reply URL (Assertion Consumer Service URL)”
   3. Click Save
9. Under the SAML Signing Certificate section, copy the URL shown in the “App Federation Metadata URL” field
   1. Open the URL in a new tab, this will show a large XML document.
   2. Search for X509Certificate
      1. Copy the first value found into the “IDP Certificate” field in HyperComply 
         1. Note: It should be roughly 1000 characters long
10. Back on the Single sign-on screen, scroll down to Step 4 (‘Set up {application name}’).
    1. Copy the value marked as Login URL and paste it into the “IDP Endpoint URL” in HyperComply 
       1. It should look something like:

‘https://login.microsoftonline.com/92977eee-c4e2-43ab-0000-90b900001843/saml2’

2. Copy the value marked as Microsoft Entra Identifier and paste it into the “IDP Entity ID” field in HyperComply 
   1. It should look something like:

‘https://sts.windows.net/92977eee-c4e2-43ab-0000-90b900001843/’

11. Check the Enable SAML box in HyperComply and click Save
12. In the final Test single sign-on with HyperComply section, click Test
    1. Select Sign in as current user and click Test Sign In
    2. You should be logged into HyperComply successfully

Tips and best practices:

Use two monitors or side by side browser windows

Have one monitor display two browser windows open side by side to easily copy and paste information from Azure into HyperComply while the other monitor has this article open for instructions.

Additional information:

Allowing Azure users to log into HyperComply can be done by adding and removing Organizational Units to the SAML application through the Azure admin portal.

Disclaimer/Notes:

If there are any errors or incorrect information from within your Azure Admin portal, please speak to your Azure point of contact as HyperComply does not have the necessary access to adequately provide support.

If you have any further questions or troubles regarding your setup, submit a request to our team here.