Edge Control - Integrate Single Sign-On With Microsoft Entra ID – StorMagic Support

This article explains how to configure Single Sign-On (SSO) for Edge Control using Microsoft Entra ID as the identity provider.

Audience: Administrators Product: Edge Control Identity Provider: Microsoft Entra ID Includes: SAML • Role Mapping • Entra ID

Important: Ensure the required SAML Attributes & Claims are configured correctly in Microsoft Entra ID. Incorrect mappings will cause the SSO integration to fail.

Configure Microsoft Entra ID Single Sign-On

Expand each section below to create the Enterprise Application, assign users, configure SAML, configure Edge Control and optionally configure role mapping.

Create the Enterprise Application

Navigate to Enterprise applications and select + New application.

Create a new Enterprise Application

From the Microsoft Entra Gallery choose Create your own application.

Enter a unique application name (for example, Edge Control) and select Create.

Create the Edge Control application

Once the application has been created, proceed to configure Single Sign-On (SSO).

Application overview

↑ Back to top

Assign Users and Groups

Assign the users or groups that should be permitted to authenticate to Edge Control through Microsoft Entra ID.

Assign users and groups

Select + Add user/group.

Add a user or group

Add user or group

In this example, users are assigned directly. The same workflow can be used with groups if they have already been configured within Microsoft Entra ID.

Select users

Choose the required users and select Select.

Choose users

Select Assign to grant the selected users access to the Edge Control Enterprise Application.

Assign users

Assignment complete

↑ Back to top

Configure Single Sign-On (SAML)

Open the Edge Control Enterprise Application and select Single sign-on.

Select Single sign-on

Choose SAML as the sign-on method.

Select SAML

Configure the Basic SAML Configuration using the following values.

Setting	Value
Identifier (Entity ID)	urn:amazon:cognito:sp:eu-west-1_Wj6yDgTye
Reply URL (ACS URL)	https://auth.manage.stormagic.com/saml2/idpresponse
Sign-on URL	Leave blank
Relay State	Leave blank
Logout URL	Leave blank

Basic SAML configuration

Configure the required user attributes and claims.

Claim	Source Attribute
email	user.mail
firstName	user.givenname
lastName	user.surname

User attributes and claims

↑ Back to top

Configure Edge Control

After completing the Microsoft Entra ID SAML configuration, return to Edge Control and sign in using an administrator account.

Navigate to Administration → Authentication → Single Sign-On (SSO).

Open the Single Sign-On configuration

Upload the Federation Metadata XML file downloaded from Microsoft Entra ID.

Upload the federation metadata

Save the configuration to enable Microsoft Entra ID as the SAML identity provider for Edge Control.

Tip: Keep an administrator session open until SSO has been successfully validated to avoid accidentally locking yourself out of Edge Control.

↑ Back to top

Test the SSO Configuration

Sign out of Edge Control and return to the login page.

Select the Microsoft Entra ID SSO login option and authenticate using an assigned user account.

After successful authentication, the user should be redirected back to Edge Control and logged in automatically.

Success: If authentication succeeds, Microsoft Entra ID SSO has been configured correctly. If authentication fails, verify the SAML metadata, user assignments and configured claims.

↑ Back to top

Configure Role Mapping (Optional)

Edge Control supports optional role mapping through Microsoft Entra ID SAML claims. This enables users to automatically receive the appropriate Edge Control permissions after authentication.

Configure the required role claim within the Microsoft Entra ID Enterprise Application and map it to the corresponding Edge Control role.

Configure role mapping

Save the configuration and authenticate using a user account that has been assigned the appropriate Microsoft Entra ID role or group.

Note: If role mapping is not configured, users may authenticate successfully but will require permissions to be assigned manually within Edge Control.

↑ Back to top

Related articles