Microsoft Entra ID Integration

This guide explains how to set up SSO login to the WhaTap monitoring service using Microsoft Entra ID as the Identity Provider (IdP). You can log in to the WhaTap service with your Microsoft Entra ID account and use the service within the assigned permissions.

Note

For more information about Microsoft Entra ID, see the Microsoft official documentation.

Prerequisites

Complete the following before starting the Microsoft Entra ID integration.

• Generate an SSO key from WhaTap: Copy the EntityID and Sign-On URL values.

Verifying your WhaTap account

The email used in Microsoft Entra ID must match the WhaTap account email for integration.

• If you have an account: Verify that the email addresses are the same on both services.

  • WhaTap: monitoring1@abc.com / Entra: monitoring1@abc.com → Integration possible
  • WhaTap: monitoring2@abc.com / Entra: monitoring3@abc.com → Integration not possible

• If you do not have an account: A one-time authentication is required.

  1. Log in to My Apps portal with your company or school account.

  2. In Apps dashboard, click the registered WhaTap application.

     

  3. Enter your name and company information to complete SSO integration.

     

  4. If an error page appears, close it and click the WhaTap application again in Apps dashboard.

Creating an enterprise application

Log in to the Microsoft Entra Admin Center and follow the steps below.

1. In Identity > Applications > Enterprise applications, click New application.

   

2. Click Create your own application.

   

3. Enter the app name and select the Integrate any other application you don't find in the gallery (Non-gallery) option.

4. Click the Create button.

Assigning users

Assign users to the created enterprise application.

1. Click Assign users and groups.

   

2. Click Add user/group.

   

3. In the Add Assignment screen, click None Selected.

   

4. Select the users to assign and then click the Select button.

5. Click the Assign button.

Configuring SAML authentication

Configure SAML so that users can log in to WhaTap with their Microsoft Entra credentials.

1. In the enterprise application's Overview, click Set up single sign on.

   

2. In Select a single sign-on method, click SAML.

   

3. In Basic SAML Configuration, click Edit.

   

4. Enter the WhaTap SSO information.

   

   • Add identifier: Paste the EntityID value from WhaTap.
   • Add reply URL: Paste the Sign-On URL value from WhaTap.

5. Click the Save button.

6. In Attributes & Claim, click Edit.

   

7. Click Unique User Identifier (Name ID).

   

8. In Source attribute, select user.mail and then click Save.

   

9. In SAML Certificates, copy the App Federation Metadata Url value.

   

10. Register the copied metadata following the WhaTap External IdP registration procedure.

Testing the integration

Test whether SSO works correctly from the Microsoft Entra ID screen.

1. In Test Single Sign-On, click the Test button.

   

2. Click the Test sign in button.

   

• If you have a WhaTap account, the WhaTap monitoring service screen appears.
• If you do not have a WhaTap account, you can create a new account through SSO integration.

Managing accounts in the enterprise application

To manage WhaTap accounts in the Microsoft Entra ID enterprise application, go to the My Apps portal.