This article explains how to enable and configure Single Sign-On (SSO) using Azure. SSO allows users to access Apostle with their existing Microsoft credentials, improving security and simplifying the login experience.
What is SSO?
Single Sign-On (SSO) enables users to access Apostle Social using their existing corporate credentials. This reduces password fatigue and enhances account security by centralizing user authentication through your organization's identity provider.
SSO is available on the Performance-Driven plan. Please contact our support team if you're unsure about your plan or need help activating this feature.
How to set up Azure SSO
1. Contact Apostle support
To begin the setup:
Reach out to the support team.
Include a request to enable SSO for your organization.
Provide the email domain(s) to be used with SSO (for example, @company.com).
⚠️ Important: SSO must be enabled by the Apostle team before you can proceed.
2. Prepare your Azure environment
Before you start:
Access Azure Active Directory: Ensure you can log in to your organization’s Azure portal.
Check permissions: Confirm that you have the rights to add and configure Enterprise Applications.
3. Log in using SSO
Once SSO is enabled for your Apostle team:
Go to apostle.social/login.
Click Log in with SSO.
Enter your work email address with the domain provided to Apostle (make sure it has Azure admin rights).
You will be redirected to your organization's Microsoft login page.
Grant the requested permissions.
You're now signed in with SSO. The SSO connection is now active.
4. Manage user access in Azure
To control who can use SSO:
Navigate to Microsoft Entra ID > Enterprise Applications > Apostle SSO.
Assign or remove users and groups.
Manage access permissions as needed.
⚠️ Important: Only users with assigned access will be able to log in via SSO.
FAQs
How do I know if SSO is available for my account?
SSO is available with the Performance-Driven plan. Contact our support team if you are unsure about your current plan.
Can I use multiple email domains with SSO?
Yes. When contacting support, list all email domains you want to associate with SSO (for example, @company.com, @subsidiary.com).
What if a user can't log in with SSO?
Verify the user has been granted access in the Azure portal under Microsoft Entra ID > Enterprise Applications > Apostle SSO.
Where can I get help if I have setup issues?
Contact the Apostle support team via chat or email for help with setup or troubleshooting.