Administrator

First, you need to add Buzz as an approved app in your Azure Active Directory:

1. From the Azure portal side menu, select Azure Active Directory.

2. Open Enterprise applications.

3. Select + New application.

4. Click + Create your own application in the top menu to add Buzz.

5. Enter Agilix Buzz as the app name.
6. Select Integrate any other applications you don't find in the gallery (Non-gallery) option.
7. Click Create.

Once you've added Agilix Buzz to your approved Azure apps, you are returned to the Enterprise applications > All applications screen you navigated to in the first two steps of the last section.

From this screen:

1. Search for Agilix Buzz.
2. Select Agilix Buzz from the list.

3. Azure recommends adding Users and groups that you want added to the Buzz app at this point. Follow their directions: Assign users and groups to an application.
4. Select Single sign-on from the left menu (or click Get started on the Single sign-on card).

5. Select SAML.

6. On the Basic SAML configuration card, click Edit and provide:
   • Identifier (Entity ID): For this, add your Buzz userspace in the appropriate place in this URL:
     • https://api.agilixbuzz.com/SAML/[INSERT USERSPACE]
   • Reply URL (Assertion Consumer Service URL): For this, add your Buzz userspace in the appropriate place in this URL:
     • https://api.agilixbuzz.com/SAML/[INSERT USERSPACE]/Consumer
   • Sign on URL (Optional): If you want to, you can add your Buzz userspace in the appropriate place in this URL:
     • https://[INSERT USERSPACE].AgilixBuzz.com/home
7. From the SAML Certificates card, download the Federation Metadata XML.

Now that you've set up Azure and acquired the metadata xml file, you're ready to set up Buzz.

In the admin app:

1. Open the vertical menu in the toolbar of Domain Details and select Domain Settings.

2. On the Authentication card, select SAML as your authentication Type. Do not choose the "old version" of SAML.
3. Click Add identity provider (IdP).

4. Provide the Login prompt. This is what appears on the login button. If you have only  one IdP, this defaults to Login, if you have more, you can label them appropriately.
5. Upload the Federation Metadata XML file that you acquired from Azure.
6. The Metadata resource path and Provider ID are automatically populated.
7. Click Done.

8. Provide a Logout redirect URL if you want users to be taken to somewhere other than the Buzz login screen when they sign out.
9. The Share SAML configuration with subdomains option allows you to let subdomains inherit this configuration, so you don't have to configure each domain individually.
   • Note: Usernames in domains that share a SAML configuration must be unique. Users with non-unique usernames cannot authenticate with Single Sign-on (SSO).
10. Indicate if you want to Prevent users from using Buzz credentials. If you don't select this, you have the options to:
    • Allow users to create their own accounts rather than requiring  they be created for them.
    • Enable multi-factor authentication.
    • Set up your password policy.
11. Save.