Configure SAML SSO with Azure Active Directory on Testlify

This guide walks you through connecting Testlify to Azure Active Directory (Azure AD) using SAML Single Sign-On (SSO). Once configured, your team members can log into Testlify using their Microsoft credentials.

Before you begin

• Admin access to your Azure Active Directory tenant — or a contact on your IT or Azure team who can create enterprise applications
• Admin access to your Testlify workspace
• Ability to share configuration values between Testlify support and your Azure AD team

Step 1: Request SAML credentials from Testlify

Start by asking Testlify support for the values you'll paste into Azure AD.

1. Email talent@testlify.com and request SAML SSO setup for your workspace.
2. Testlify will respond with two values:
   • Assertion Consumer Service (ACS) URL
   • Audience URL (Entity ID)

Save these values — you will paste them into Azure AD in the next step.

Step 2: Create an enterprise application in Azure AD

Provide the ACS URL and Entity ID from Step 1 to your Azure AD administrator. If you manage Azure AD yourself, follow these steps:

1. In the Azure Active Directory admin center, go to All Services > Azure Active Directory > Enterprise Applications.
2. Click New Application.
3. On the Browse Azure AD Gallery page, click Create your own application.
4. Enter a name (for example, "Testlify"), select the appropriate option, and click Create.
5. On the application Overview page, click Single sign-on, then select SAML.
6. In the Basic SAML Configuration section, click Edit and enter the following, then click Save:
   • Identifier (Entity ID) — paste the Audience URL (Entity ID) from Testlify
   • Reply URL (Assertion Consumer Service URL) — paste the ACS URL from Testlify
7. Download the Certificate (Base64) and copy the Login URL and Azure AD Identifier from the same page — you will need all three in Step 3.
8. Go to Users and Groups and click Add User/group.
9. On the Add Assignment page, select the group that needs access to Testlify, then click Assign.

Step 3: Send Azure AD details to Testlify

Email talent@testlify.com with the following values from Step 2:

• Single sign-on issuer — the Azure AD Identifier
• Identity provider SSO URL — the Login URL
• X.509 Certificate — paste only the certificate string from the Base64 certificate file; omit the -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- header and footer lines
• Username mapping — the SAML attribute used for login, written as ${AttributeName}. For most Azure AD setups, this is ${EmailID}

Tip: The username mapping attribute must exactly match the attribute name configured in your Azure AD application. If users cannot log in after setup, verify that the email attribute name in Azure AD matches the value you provided here.

Step 4: Test the SSO integration

1. Open an incognito or private browsing window to avoid cached session cookies.
2. Navigate to your Testlify Workspace URL.
3. Click Login with SSO on the login page.
4. You will be redirected to the Microsoft login page. Sign in with a valid user account that has been assigned access.

For SSO to work, the test user must meet all three conditions:

• The user exists in Testlify with the appropriate access level
• The user is assigned to the Azure AD enterprise application
• The user's login attribute in Azure AD (e.g., EmailID) matches their username in Testlify

Need help? Contact support.