This article discusses functionality that is included in the Aha! Knowledge Advanced plan. Please contact us if you would like a live demo or want to try using it in your account.
You can use Entra ID as an identity provider for knowledge base SSO in Aha! Roadmaps based on SAML 2.0. You will need to be an administrator in Aha! Knowledge and in Entra ID to configure SSO.
In Aha! Knowledge
Navigate to Settings ⚙️ -> Account -> Knowledge -> Knowledge bases. You will need to be an administrator with customizations permissions to configure a knowledge base.
Click the knowledge base you want to configure. This opens that knowledge base's settings.
On the Overview tab, find the Authentication settings. Next to the Authentication dropdown, select SSO.
In the SSO identity provider dropdown, select +Add new provider.
On the next screen, enter a Name to identify the SSO configuration. Next to Type, select SAML. Click Save.
The SAML 2.0 configuration will display. Leave this open for reference in the next set of steps.
In Entra ID
Log in to Entra ID. If you have not already done so, select the Entra ID service from the left sidebar.
Click Enterprise applications.
Select All applications from the Application type dropdown.
-
If you do not see Aha! as one of your available applications, you may need to add it. Click New application.
Scroll or search for Aha!, then select it.
Click Create.
In the getting started form, Name your application, then move on to the SAML SSO configuration quick start guide.
On the Aha! Roadmaps application integration page, find the Manage section and select Single sign-on.
On the Select a Single sign-on method page, select SAML.
On the Set up Single Sign-On with SAML page, click the pencil icon for Basic SAML Configuration to edit the settings.
-
On the Basic SAML Configuration section, perform the following steps:
In the Sign on URL text box, copy the URL from your Aha! knowledge base's SSO settings by navigating to Users SSO.
In the Identifier (Entity ID) text box, enter your knowledge base's URL.
On the Set up Single Sign-On with SAML page, in the SAML Signing Certificate section, find Federation Metadata XML and select Download to download the certificate and save it on your computer.
On the Set up Aha! section, copy the appropriate URL(s) based on your requirement.
Back in Aha! Knowledge
Update your SSO configuration and change Settings using to Metadata File.
Upload the Federation Metadata XML that your downloaded from Azure AD.
Enter any remaining fields following the SAML 2.0 configuration instructions.
Click Enable SSO to complete the configuration.
Share your SSO configuration
Since SSO for ideas portals is configured in the same way as knowledge base SSO, knowledge bases and ideas portals can share an SSO configuration.
The table below explains how many ideas portals and knowledge bases can share a single SSO configuration, depending on which Aha! plan(s) you are subscribed to.
Aha! plans |
Number of ideas portals on a single SSO configuration |
Number of knowledge bases on a single SSO configuration |
Notes |
Aha! Roadmaps |
1 |
0* |
One SSO configuration per ideas portal. |
|
Aha! Roadmaps + Aha! Ideas Advanced |
2+ |
0* |
One SSO configuration can be shared between multiple ideas portals. |
|
Aha! Roadmaps + Aha! Knowledge Advanced |
2+ |
2+ |
One SSO configuration can be shared between one ideas portal and multiple knowledge bases. |
|
Aha! Roadmaps + Aha! Ideas Advanced + Aha! Knowledge Advanced |
2+ |
2+ |
One SSO configuration can be shared between multiple ideas portals and multiple knowledge bases. |
* Publishing a knowledge base requires an Aha! Knowledge Advanced plan.
To share your identity provider configuration between multiple knowledge bases and/or with a single ideas portal:
Navigate to Settings ⚙️ -> Account -> Knowledge -> Knowledge bases. You will need to be an administrator with customizations permissions to do this.
Click a knowledge base to open its settings.
Once you have your knowledge base settings open, navigate to Overview -> Authentication.
Select an identity provider you have configured from the Identity provider dropdown.
Repeat these steps for each knowledge you wish to use the shared Identity provider configuration.
You can manage your identity provider configuration — and the knowledge bases that use it — from the Identity providers tab in Settings ⚙️ -> Account -> Knowledge -> SSO.
Troubleshooting
We have created an article to help you troubleshoot common SSO configuration issues, complete with explanations and resolutions.
The best place to start in most of these situations is the Recent SSO events for your SSO configuration, at the bottom of the configuration page. Those messages will help diagnose and solve the problem.
If you get stuck, please reach out to our Customer Success team. Our team is made up entirely of product experts and responds fast.