Azure AD SSO Configuration

Prerequisites

• Getting Started with Single Sign-On
• Obtain your SSO Unique ID (Find out the how-to on this support page article)
• Replace the ID in the URLs below where you find: "YOURSSOUNIQUEID"
• Keep the below URLs available for later in the setup.
  • Entity ID https://www.hackerrank.com/x/api/v1/sso/saml/YOURSSOUNIQUEID/metadata
  • ACS/Reply URL - https://www.hackerrank.com/x/api/v1/sso/saml/YOURSSOUNIQUEID/acs
  • Sign-on URL - https://hackerrank.com/work/home
  • Logout URL - https://www.hackerrank.com/x/api/v1/sso/saml/YOURSSOUNIQUEID/logout

Note:  HackerRank can only accept the user's email address in setup. HackerRank SSO will fail if it receives anything but an email address.

Setting up the SSO on Azure

1. Head to the customer's Azure Portal: https://portal.azure.com
2. Search for Enterprise Applications -> New Application
3. Click Create your own application. Add a name to the app.
   Pick Integrate any other application you don't find in the gallery (Non-gallery)
4. Click Set up single sign-on (Located on the left pane) -> SAML
5. Using the URLs from step 1 (Seen above), you may either create and upload a metadata file and then upload or manually enter the URLs from step 1 of the instructions as seen in step 6. (Seen below)
6. If metadata was uploaded, ensure the Identity ID, Reply URL, Logout URL, and
   Sign-on URLs are correct. If you're entering the URLs manually, click Edit on Basic SAML Configuration and enter the URLs from step 1 manually.
   Click to save.
   
7. Verify the attributes as the sample below. 
   Download the Federation Metadata XML.
8. Upload the metadata file to HackerRank

Adding Users to the Group

• This step varies from organization to organization, depending on their security policy.
• You can click on Users and Groups and add users or groups to have access to this app.

Testing the SSO Integration

It can be tested in two ways.

1. Copying the HackerRank SSO Link from Step 2, and trying it in a private/incognito window.
2. You can Enable SSO and test the single sign-on from the Azure Portal.
   • Note: For the second way of testing on the Azure Portal, ensure that you do not close the SSO page while testing. In case the setup is not successful, you can disable SSO on the same page.

References

• Configuring SAML Single Single Sign-On (SSO) for Azure AD Users
• Tutorial: Azure Active Directory single sign-on (SSO) integration with OpenAthens - Microsoft Entra
• Quickstart: Add an enterprise application  - Microsoft Entra