Before following the below steps to set up single sign-on using Azure AD, please read this article with more general information regarding Peakon's single sign-on.

1. Enable single sign-on in Peakon

  1. Click on Administration in the bottom left corner of the Peakon dashboard
  2. Choose Integrations and then select Single Sign-On 
  3. Click the Connect button and you’ll be taken to the page you see in the screenshot below

On this page, you will later input your SSO login URL and certificate provided by Azure AD. Here you will also find the entity ID and reply URL (ACS) for Peakon, which you will enter into Azure AD a bit later in this guide.

2. Configure the Peakon SAML app 

1. Launch Azure AD then navigate to Enterprise Applications

2. Now search for Peakon.

3. On the Peakon overview page click on Set up single-sign-on.

4. Follow the steps by entering the ACS URL and Entity ID which you need to get from the Peakon Integrations page. 

5. You then need to ensure the fields in Peakon match in your AD instance. The default values should work if you have not changed the default values in Peakon. 

6.  Download the certificate in base64 format and upload to Peakon. 

7. Lastly, copy the Login and Logout URL into Peakon

3. Test that single sign-on is working

Now that you have configured Azure AD to integrate with Peakon, you are ready to test it:

  1. Go to app.peakon.com/login and enter your company email address.
  2. After entering the email, Peakon will detect that this email supports single sign-on, and clicking the Sign in button will redirect you to internal Azure AD sign in page, before redirecting you back to Peakon and logging you in
  3. If you prefer to sign into Peakon using your existing password, you can skip the single sign-on step by clicking Sign in using password after entering your email
  4. Optionally, go directly to (or bookmark) app.peakon.com/saml/{your email domain}, which will start the single sign-on flow directly without visiting the Peakon login page first

Article: Introduction to using single sign-on
Article: Set up single sign-on with G Suite (Google Apps)
Article: Set up single sign-on with Microsoft ADFS
Article: Set up single sign-on with OneLogin
Article: Set up single sign-on with Okta

Did this answer your question?