Configure Azure SAML SSO in Insomnia

Before you can configure the SSO connection in Azure, you must start configuring the SSO settings in Insomnia so you have access to the single-sign on URL and audience URI for the Azure settings.

1. In your Insomnia account settings, click your account at the top right and select Enterprise Controls from the dropdown.
2. Click SSO in the sidebar and then click Create Connection.
3. In the SSO settings, enter your company’s domain.

Keep this window open while you configure the settings in Azure.

Now that you have the single-sign on URL from Insomnia, you can create a new Microsoft Entra SAML Toolkit.

1. In the Microsoft Entra admin center, create a new application and add the Microsoft Entra SAML Toolkit from the gallery.
2. Rename the toolkit “Insomnia SAML”.
3. Navigate to the SSO settings for the Microsoft Entra SAML toolkit you just created.

4. Configure the following SAML SSO settings:

   Azure setting	Value
   Identifier (Entity ID)	The Audience Restriction field in the Insomnia SSO settings.
   Reply URL	The SSO URL in the Insomnia SSO settings.
   Sign on URL	The SSO URL in the Insomnia SSO settings.

5. In the Attributes & Claims settings section, add an attribute and configure the following attribute settings:

   You need…	Use the following plugin policy strategies…
   A high level of accuracy in critical transactions. An example is a transaction with financial consequences.	cluster or redis
   Protect backend services from overloading caused by specific users or attacks. High accuracy is not as relevant.	local

6. In the Entra application, find and copy the Login URL and the base64 version of the signing certificate. These will be used in the Insomnia SSO settings.

Now that Azure SSO is configured and you have the Login URL and certificate from Azure, you can finish configuring the SSO settings in Insomnia.

1. In the Insomnia SSO settings, enter the Login URL and signing certificate from Azure.
2. To verify the connection, click Create connection. If the connection is successful, you will get a message that says “Your SAML connection has been successfully updated.”

You can add users or groups to the application in Azure. They won’t be allowed to log in with SSO yet though.

In Azure, assign users or groups to the app.

Now that users or groups are assigned to the app in Azure, you can start inviting users to Insomnia. Once they accept the invite, they can log in to Insomnia with SSO.

1. In your Insomnia account settings, click your account at the top right and select Your organizations.
2. Click the organization you configured SSO for.
3. Enter the emails of the users you added to the Azure app and click Invite.