Azure/Entra SSO Configuration Guide

Zoapi Innovations is a leading provider of intelligent solutions for modern workspaces. Our flagship products, Zoapi Hub and Zoapi Scheduler, have been widely recognized for their robust features and ease of usage, making it the preferred choice for enterprises looking to improve their meeting room collaboration capabilities.

The Zoapi dashboard allows system administrators to manage their Zoapi devices from a single location, remotely. It also allows configuring alerts and viewing device usage data.

The dashboard also allows multiple administrators to manage the dashboard using the Co-Admin feature and Role Based Access Privileges can be configured by the account owner.

To login to the dashboard,  multiple mechanisms are supported – Password Authentication, Google & Office 365 OAuth and SSO using both SAML and OIDC/OAuth.

This document describes the mechanisms to be used to configure SAML SSO using Microsoft Entra for Microsoft Office 365 users.

Preliminaries #

To enable dashboard authentication with SSO, please send a request to the Zoapi Support – You can raise a ticket at https://tickets.zoapi.com or send an email to support@zoapi.com.

SSO authentication is enabled for a requested domain (user@<yourdomain>). Once enabled, other authentication mechanisms like Password, OAuth get disabled for users of the entire domain.

Also note, even though SSO authentication is enabled, only those administrators, who have been added as Co-Admins will be able to access the dashboard devices, based on the privileges assigned through the Role Based Access Control configurations. Appendix-I shows minimal instructions on adding Co-Admins and setting up RBAC restrictions.

Setting up Entra (Azure) SAML SSO Configuration #

1. Login to https://entra.microsoft.com.
2. Select Enterprise apps.

3. Click on New application.
   
4. Give the application a suitable name – use a convenient name (As an example, we have used Zoapi Dashboard for this demonstration).

NOTE: The application name is just a convenience name provided by you to identify the application

5. Select non-Gallery and click on create.
6. Click on Single sign-on in the left panel.
   
7. Select SAML.
   
8. Click on edit in Basic SAML configurations.
   

Enter an identifier name (For this demonstration we have used zoapi, you can give any name here) and enter reply URL as https://share.zoapi.com/dashboard/login/sso/acs and click on Save.
NOTE: The Identifier is a convenient name you are providing to identify the application

5. Scroll down, Go to SAML Certificate, click on edit.
6. Change the Sign in option to Sign SAML response and assertion.
   
   
7. Once the certificate is generated, share the following with us (follow up to the support ticket):

• Identifier Name (can be found under Basic SAML)
• Login URL (can be found under set up <application name> – Zoapi Dashboard in this demonstration)
• Base-64 Certificate (can be found under SAML Certificate)These screenshots show where you can find these details:

Adding Co-Admins and Assigning Roles #

 

This section explains briefly how to add a Co-Admin, switching between Co-Admin views and assigning privileges to Co-Admins. This section is not exhaustive and only provides a quick overview of the feature.

 

1. In the top left User Menu – select Roles.
   

   #

2. In the Roles Page, you have 3 Tabs.
   

 

• Tags: Create Tags that can be assigned to your devices. You can add tags like City, Building, Floor etc. Every Device is automatically assigned the “All”.
• Roles: Create Roles and configure privileges. The Admin and Co-Admin privileges are created by default. The Co-Admin does not have some rights like deleting devices.
• Co-Admin: Add/Modify Co-Admins by assigning Roles for privileges and Tags to which the Co-Admin will have access.

 

3.To switch view to a different account (if you are a Co-Admin) – select the drop-down besides the User Profile Icon.

 

Setting up Access Control Features #

1. Create Tags in the Roles Screen and apply these to the device under the Roles tab in device settings. Tags can be added using Bulk Settings too.
2. Create Roles in the Roles Screen and add privileges and Tags for the Role.
3. Add Co-Admin and assign Roles to them.

 

If you are a Co-Admin – switch to the Co-Admin view after logging in.