Note: This feature is only available for enterprise customers and should be set up with the Happl Support team.
Step 1: Open the Azure Active Directory Dashboard
This can be found here - https://portal.azure.com/#view/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/
Step 2: Create an Enterprise application
From the Add app button in the toolbar, choose Enterprise application.
Step 3: Select 'Create your own application'
Name: Happl What are you looking to do?: Integrate any other application you don't find in the gallery (non-gallery)
Step 4: Set up single sign-on option
Before you get to assigning users and groups, which would allow accounts in Azure AD to access Happl, you need to configure the SAML details that allows Happl to accept sign in requests from Azure AD.
Click 2. Set up single sign on
Step 5: Select SAML single sign-on method
Happl supports the SAML 2.0 protocol for Single Sign-On, which is an industry standard.
Step 6: Create the SAML connection
Select edit for section 1 - Basic SAML Configuration
Add the below information
Detail | Value |
Identifier (Entity ID) | https://api.live.happl.io/auth/v1/sso/saml/metadata |
Reply URL (Assertion Consumer Service URL) | https://api.live.happl.io/auth/v1/sso/saml/acs |
Sign on URL (Optional) | https://app.happl.com |
Relay State (Optional) | https://arhpwhqbiccpajnbaxkn.supabase.co |
Logout Url (Optional) | Leave blank |
Step 6: Configure attribute mapping
Attribute mappings allow Happl to get information about your Azure AD users on each login.
Ensure that the below are set (this should happen automatically)
Basic Information | App attributes |
givenname | user.givenname |
surname | user.surname |
emailaddress | user.mail |
name | user.principalname |
Unique User Identifier | user.principalname |
Step 7: Configure user access
You can configure which Azure AD user accounts will get access to Happl. This is important if you wish to limit access.
Most companies allow for all users to have access
Changes from this step sometimes take a while to propagate across Microsoft systems. Wait at least 15 minutes before proceeding to the next step.
Click on the Step 3 - Provision User Accounts
Then select the users you want to have access - commonly you would simply opt for on for everyone
Step 8: Contact Happl
Once you have completed these steps, contact happl and send us the 'App Federation Medadata URL'
Click '2. Set-up single sign on'
Scroll down to section 3 and copy the 'App Federation Metadata Url
Contact Happl Support (email [email protected]) and send this URL. You will need to send this email from your Happl registered user, and you will need to be an admin of the company. If you are not, then please ask someone from the admin team at your company to send Happl the URL.
Once we have added it to your account, we will let you know, and providing you have completed all of these steps, you should be good to go!
The next step is to log into Happl and test if you are able to log in.
Note: SSO does not create users; it only allows them to log in. The HRIS integration still carries out user creation, so users will need to be on the Happl platform to be able to log in using SSO.