Single Sign-on Using Azure Active Directory Beta

Follow our guide to set up single sign-on (SSO) into Fivetran using the Fivetran Azure Active Directory gallery application.

---

Prerequisites

To use Azure AD SSO with Fivetran, you need Azure and Fivetran accounts.

---

In Azure

Add and configure the Fivetran application

1. Log in to your Azure account and go to the Active Directory service.

   

2. In the left menu, select Enterprise Applications.

   

3. Click New Application.

   

4. Enter Fivetran in the search box.

5. Select the Fivetran application.

6. Click Add.

   

7. In the Getting Started section, select Set up single sign on.

   

8. Under Select a single sign-on method, select SAML.

   

9. In the Save single sign-on modal, click No, I'll save later.

   

10. In the Basic SAML Configuration box, click Edit.

    

11. Click Save. The settings are pre-configured.

    

12. In the Test single sign-on with Fivetran modal, click No, I'll test later.

13. In the left menu, go to Users and groups.

    

14. Click Add user.

    

15. Click on the Users list item and add the users to whom you want to grant access to Fivetran. Then, click Assign.

    

Get Sign on URL, Issuer and Public certificate

To complete setup in Fivetran, you need the Sign on URL, Issuer and Public certificate. Follow these steps to get them:

1. Return to the Single sign-on page of your Fivetran application in Azure AD.

   

2. Make a note of the Login URL. This is Sign on URL in Fivetran.

3. Make a note of the Azure AD Identifier. This is the Issuer in Fivetran.

4. To get the Public certificate, download the Federation Metadata XML file.

   

5. Open the downloaded Federation Metadata XML file in any text editor. The certificate is a string inside the X509Certificate XML tag. Make a note of it. You will enter it in the Public certificate field in Fivetran.

   

---

In Fivetran

Note: By default Fivetran allows user provisioning. If you don't have a Fivetran user for the selected Azure account, the user will be created automatically with the read-only access. To grant a newly created user write access to your Fivetran account, log in as the account owner, go to the account management page. On the Users tab, manage the user's permissions.

1. Go to the account management page in your Fivetran dashboard.

2. Go to the Settings tab.

3. Toggle the Enable SAML authentication selector to ON.

4. Fill the Sign on URL, Issuer and Public certificate fields with the values you noted in Step 2: Get Sign on URL, Issuer and Public certificate.

   

5. Click Save Config at the bottom of the settings page. You'll see Account settings successfully saved.

---

Testing SSO (Optional)

To test SSO, follow these steps:

1. Go to https://myapps.microsoft.com.
2. Log into the account you have granted access to.
3. Click the Fivetran button. You will be redirected to your Fivetran dashboard.