We know how important is to be SAML / SSO compatible for some companies.
Now you can use SAML 2.0 protocol to connect to Tomorro in the most secure way.
This allows you to bring in your favourite Identity provider and connect to Tomorro via SSO for the highest standard authentication.
Connect on Tomorro
In order to set up the integration, please go to the integration setup page on Tomorro and open the section Authentication SAML to start the setup. Only admins have access to this section.
Setup on Azure
STEP 1 - Create a custom app on AZURE
STEP 1 - Create a custom app on AZURE
Go to Entreprise applications > Click on the button “New application”
Then click on the “Create your own application” button.
You can choose the name of your app, “Tomorro” for instance
And select the option “Integrate any other application you don’t find in the gallery”.
STEP 2 - Configure SAML settings for the app
STEP 2 - Configure SAML settings for the app
Select the single sign-on method SAML, and then start the configuration of the Basic SAML.
Connect to your Tomorro setup page as describe in the first part.
Copy the field Tomorro Callback URL and paste it to the fields Reply URL (Assertion Consumer Service URL) and Sign on URL of Azure.
Copy the field Tomorro Entity Identifier, and paste it to the field Identifier (Entity ID) of Azure.
STEP 3 - Attributes
STEP 3 - Attributes
The Claim name of the Unique User Identifier (Name ID) should be the user.mail
Update the “source attribute” accordingly.
STEP 4 - SAML Certificates
STEP 4 - SAML Certificates
Now it is time to configure the SAML Certificates.
Copy the Azure AD Identifier and paste it to the field Issuer of Tomorro
URL should look like
https://sts.windows.net/XXX
Copy the Login URL and paste it to the field Entrypoint of Tomorro.
URL should look like
https://login.microsoftonline.com/XXX
Download the Certificate Base 64, open it and paste the data in the field x509 certificate.
Structure of Base 64 Certificate
-----BEGIN CERTIFICATE----- [CERTIFICATE] -----END CERTIFICATE-----
Don’t forget to click on “Update” after adding this data on Tomorro.
Go to the section User of the Azure app and allow your users to use the app.
The SAML protocol is now activated for Tomorro !