SAML for JustLogin Using Microsoft Entra (SSO Login)

SAML (Security Assertion Markup Language) is an authentication standard that lets users sign in to multiple applications using a single set of credentials. This simplifies access management and eliminates the need to maintain separate usernames and passwords for services such as JustLogin, CRMs, and other business platforms.

This guide is divided into three parts. Complete all parts in order for SSO to work seamlessly with your JustLogin account.

Key Terms

Pre-requisites

1. A Microsoft Entra user account with an active subscription.
2. Your JustLogin usernames must exactly match the email addresses of the corresponding Microsoft accounts. This is the unique identifier recognised by the system. If you need to update usernames and are unable to do so, contact support@justlogin.com.

Part 1 – Enabling SAML on JustLogin (Service Provider)

1. Log in to your JustLogin account.

2. Go to UserAdmin.

   

3. Click the tab at the top of the page.

4. Click the SSO sub-tab.

   

   Note: If you cannot find the SSO sub-tab, contact support@justlogin.com.

5. The SSO configuration page will appear:

   

6. Toggle the slider to enable SAML.

7. The left column displays your Service Provider (JustLogin) details. These are pre-filled automatically — no changes are needed here.

   

8. The right column requires information from your Identity Provider (Microsoft Entra). You will complete this after finishing Part 2.

   

Part 2 – Setting Up JustLogin on Microsoft Entra

Create the JustLogin Enterprise Application

1. Log in to your Microsoft 365 account as an administrator and click the Admin icon on the left side of the page.

   

2. The Microsoft 365 Admin Centre opens in a new tab.

   

3. Click Show All on the left panel to expand all options, then click Identity.

   

4. You will be redirected to the Microsoft Entra admin centre.

5. In the left panel, navigate to Identity ➜ Applications ➜ Enterprise applications.

   

6. Click New Application.

7. Click Create your own application.

   

8. In the right-side panel, enter JustLogin as the application name.

   

9. Click the button at the bottom of the panel.

10. Once created, the application properties page appears.

    

Assign Users to the Application

1. Click Assign users and groups to control which users or groups can use SAML/SSO.

   

2. Click Add user/group.

   

3. Click None selected under Users.

   

4. In the right-side panel, select the users you want to enable for SAML/SSO, then click at the bottom of the panel.

   

5. Click at the bottom of the page to confirm the assignment.

Configure Single Sign-On (SAML)

1. After assigning users, click Overview in the left panel.

   

2. Click Set up single sign-on.

   

3. Select SAML as the sign-on method.

   

4. In the Basic SAML Configuration section, click the Edit icon.

   

5. Complete the following fields using the values displayed on your JustLogin SSO page (from Part 1):

   

   • Identifier (Entity ID) – Copy the Entity ID from your JustLogin SSO page:

     

     Paste it into the Identifier (Entity ID) field in Microsoft Entra, then tick the Default checkbox.

     

   • Reply URL (Assertion Consumer Service URL) – Copy the Reply URL from your JustLogin SSO page:

     

     Paste it into the Reply URL field in Microsoft Entra, then tick the Default checkbox.

     

6. Leave all other fields blank and click Save.

   

7. In the SAML Certificates section, download the federation metadata certificate and save it to your computer — you will need it in the next step.

   

Complete the JustLogin SSO Configuration

1. In the Set up JustLogin section of the Microsoft Entra SSO page, copy the Login URL:

   

   Return to your JustLogin SSO setup page and paste it into the Identity Provider Sign-in URL field:

   

   Note: Repeat this step for the Identity Provider Sign-out URL, copying the corresponding Logout URL from Microsoft Entra and pasting it into the matching field on the JustLogin SSO page.

2. On the JustLogin SSO page, click the certificate upload area and upload the certificate you downloaded from Microsoft Entra.

   

3. Click to save your JustLogin SSO settings.

4. (Optional) In Microsoft Entra, navigate to Properties for the JustLogin application. Here you can upload the JustLogin logo for easy recognition, and copy the user access URL to share with your employees so they can bookmark or create a shortcut.

   

   

Part 3 – Logging In via SSO

Once setup is complete, assigned users can sign in to JustLogin using either of the following methods:

Method 1: Via the Microsoft 365 All Apps Portal

Click the All Apps icon in Microsoft 365. JustLogin will appear in the list of available apps. Clicking it will sign the user in automatically — no username or password required.

Method 2: Via the JustLogin Login Page

1. Go to https://www.justlogin.com/login.aspx.
2. Instead of entering your credentials, click Login with SSO.
3. Enter your Microsoft email address and click Continue.