Single Sign-On Setup for Azure AD/Entra

Note: This feature is only available to Enterprise customers, as well as customers on the PDF Plus, Sign Plus or higher plans.

Your account must have a verified domain in order to set up and enable SSO. Review this article for instructions on verifying your domain.

1. Log in to the Microsoft Azure Portal
2. Go to Microsoft Entra ID
3. Navigate to Enterprise applications > All applications.
4. Add Nitro Productivity Suite application

5. Navigate to SAML SSO section on Nitro Productivity Pro

   1. Enter the following placeholder values:

      1. SAML Entity ID:urn:auth0:gonitro-prod:123
      2. ACS URL: https://gonitro-prod.eu.auth0.com/login/callback?connection=123
         These will be updated later in Step 3.
6. Download the Base 64 Cert from Box 3.
7. Copy Login URL from Box 4.

1. Log in to the Nitro Admin Portal
2. From the left navigation pane, go to Settings, then navigate to the Single Sign-On tab.
3. Click the Edit Configuration button.

3. Paste the Login URL copied from Entra into the Sign-in URL field.
4. Upload the Base 64 Cert downloaded from Entra into the X.509 Signing Certificate field.

5. Click Submit and Enable SSO, then click Save.

6. Copy the following values for use in the next step:

   • Entity ID
   • Reply URL 1
   • Reply URL 2

1. Go back to Microsoft Entra ID

2. Navigate to Enterprise applications > All applications > Nitro Productivity Suite

3. Under the Manage menu, click Single sign-on. 
4. Click Edit on Basic SAML Configuration

5. Update the placeholder values using the values copied from Nitro Admin:

   • Paste SAML Entity ID to Identifier (Entity ID)
   • Paste both Reply URL 1 and Reply URL 2 to under Reply URL (Assertion Consumer Service URL)

5. Save Changes