Overview

The Anterra Platform is only available through POST authentication. This means that users will initiate their login to the Anterra Platform from the Office 365 portal. Logging in from the Anterra Platform authentication page will allow users that have established a password with Anterra to have a secondary way to login which is useful if the Office 365 portal or Azure authentication services are unavailable.

User Accounts / Security Considerations

Accounts that are logged into must already be configured in Anterra in User Administration with the appropriate permissions. Once the user is setup and the application is available to them through your Office 365 portal they can login without establishing a password on Anterra. These accounts can only be accessed through SSO. If you choose you can still initiate an invite to setup a password for any user which will allow them to login using that password through our standard login page (https://auth.anterracloudbi.com). Users who can only login via SSO are indicated in User Administration with a red color on the e-mail invite icon.

Create Enterprise Application

The following steps initiate the process of getting single sign-on configured between Anterra and your Azure AD. Once these steps are complete

1. Login to your Azure Portal (https://portal.azure.com)
   
2. Navigate to the Azure Active Directory you want to integrate Anterra with 
   
3. Navigate to Enterprise applications inside your Active Directory
   
4. Click the New application button
     
   
5. Click the Create your own application button
     
   
6. Type Anterra Platform for the name of the application and choose Integrate any other application you do not find in the gallery (non-gallery)
   
7. To use the Anterra logo for the application (instead of just a letter) you can optionally:
   
1. Right-click and Save As to download this image: 
2. Click on Properties on the left side of the Azure interface
   
3. Click the  icon and browse to the file downloaded above
   
8. Click on Single sign-on then choose SAML as the single sign-on method
   
9. 
   
10. Click here to open a new tab/window and login to the Anterra Platform
    
11. Once you are logged in, click this link to download our metadata file
    
12. Click Upload metadata file and upload the file downloaded in the previous step
      
    
13. Set SAML signing options to “Sign SAML response and assertion”  here
    

Submit SSO Information to Anterra

1. Start from the previous section (Azure Portal > Azure Active Directory > Enterprise Applications > Anterra Platform > Single sign-on)
   
2. Click here to open our SSO Setup Form in a new tab
   
3. Download the Base64 certificate here:
   
4. Copy the Login URL, Azure AD (Active Directory) identifier, and Logout URL and provide it in the form:
   
5. You're done, submit the form to Anterra.  Once we've reviewed your information we'll schedule pushing out the changes to our authentication servers.

Provisioning Users