Microsoft Entra ID (formerly Azure Active Directory) can be configured as the Identity Provider (IdP) for SAML 2.0 authentication with Questetra. This article explains the required configuration steps.
Prerequisites
- A Microsoft Entra ID account with the Application Administrator or Cloud Application Administrator role (or higher)
- A Questetra system administrator account
Step 1. Check the SP Information in Questetra
- Open System Settings → SSO (SAML) in Questetra
- Enable Single Sign-On
- Record the following values displayed under SP Information:
- Entity ID
- ACS URL
Step 2. Add the Application in Microsoft Entra ID
- Sign in to the Microsoft Entra admin center: (https://entra.microsoft.com/)
- Navigate to Entra ID → Enterprise applications → New application
- In the Gallery search box, search for Questetra BPM Suite, select Questetra BPM Suite from the search results, then click Create to add the application.
Step 3. Configure SAML SSO in Microsoft Entra ID
- Select Single sign-on → SAML in the the newly added application
- Edit the Basic SAML Configuration and enter the following values:
- Identifier (Entity ID): The Entity ID recorded from Questetra in Step 1
- Reply URL (Assertion Consumer Service URL): The ACS URL recorded from Questetra in Step 1
- Sign-on URL: The URL of the Questetra login page (for example, https://[your-questetra-domain]/Login_show)
- In the SAML Signing Certificate section, download the Certificate (Base64)
Step 4. Configure the IdP Settings in Questetra
Copy the following information from the SAML-based Sign-on page in Microsoft Entra ID into the corresponding fields in Questetra.
| Entra ID Display Fields | Questetra Input Fields |
|---|---|
| Microsoft Entra Identifier | Entity ID |
| Login URL | Login Page URL |
| Logout URL | Logout Page URL |
| Contents of the downloaded Base64 certificate | Certificate |
To enter the certificate, open the downloaded .cer file in a text editor and copy everything from —–BEGIN CERTIFICATE—– through —–END CERTIFICATE—–. When pasting the certificate into Questetra, ensure that the alphanumeric string between BEGIN CERTIFICATE and END CERTIFICATE is entered as a single continuous line with no line breaks.
Step 5. Verify the Configuration
Confirm that the Log In with Single Sign-On button appears on the Questetra login page, then perform a test login.
Troubleshooting
- The Single Sign-On login button does not appear: Verify that Enable Single Sign-On is enabled in Questetra.
- Authentication fails: Verify that the Entity ID and ACS URL configured in Microsoft Entra ID exactly match those configured in Questetra.
- Certificate error: Verify that the certificate string does not contain any extra spaces or line breaks.
