Print

Add eCase as a new Enterprise Application

To add eCase as a new Enterprise, there are a number of steps to configure Azure AD.

Contents

• Configure Azure AD to recognise eCase as an Enterprise Application.
• Configure the Enterprise Application to allow SAML authentication.
• Configure the Enterprise Application to send the required user attributes to eCase.

Configure Azure AD

First, you need to configure Azure AD to recognise eCase as an Enterprise Application. In the Azure AD management console:

1. Click Enterprise Applications.
2. Next, click Add application.
3. Select Non-gallery application.
4. Enter a display name of your choice, for example eCase
5. Click Add

SAML Authentication

Configure the Enterprise Application to allow SAML authentication.

1. On the left hand menu, click Single Sign-on
2. When prompted to select a Single Sign-on method, select SAML
3. Edit the Basic SAML configuration section. Enter the following values using the information found in the SAML Settings page on eCase. Go to the More menu on the eCase menu bar and click on the drop down arrow. Select the SAML Settings link under the Settings column. The SAML Settings page appears.
   
   

   SAML Configuration	Value from SAML Settings page on eCase
   Entity ID	Enter the SP Entity ID
   Reply URL	Enter the SP Endpoint URL

4. Click Save to apply the changes.

Back to Top

User Attributes & Claims

Next, configure the Enterprise Application to send the required user attributes to eCase.

1. On the Single Sign-On page, edit the User Attributes & Claims section.
2. Azure should set the default attributes as shown in the table. If it does not, you will need to set them yourself.
   
   

   Claim Name	Value
   Unique User Identifier (NameID)	user.userprincipalname
   http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress	user.mail
   http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname	user.givenname
   http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname	user.surname

   
   NOTE It is your responsibility to ensure that the Name ID is a unique, unchanging identifier for an individual user. eCase will create a duplicate account for a user if their Name ID changes.
   
   You will also need to add Users or Groups to the Enterprise Application to allow specific users to log in to eCasefrom Azure. This is beyond the scope of this guide – please consult the Azure AD documentation.
3. Test the settings. Do not use the Test button provided on the Azure AD management console to test the configuration as this will not work correctly. To test your configuration, you should use the Test SAML Settings button on the SAML Settings page in eCase.

   Back to Top