Before you start
You must be able to log into your Entra ID account with administrator access. This will enable you to add a new app integration in Entra ID for SwiftComply.
Nice to have: Prior experience adding app integrations in Entra ID
Confirm that the users who should have access to SwiftComply are present in both Entra ID and SwiftComply. In SwiftComply, you can do this on the Users tab. By default, the integration will map Entra ID users’ User Principal Name attribute to the Email property of the corresponding SwiftComply user
Note: If it’s a requirement for Service Provider users to go through SSO, that probably requires additional discussion.
Create a new Enterprise App in Entra ID
Go to the Microsoft Entra ID tab > Enterprise Applications
Click New Application
Click Create your own application
Enter a name (e.g. SwiftComply) and then check the box for “Integrate any other application you don’t find in the gallery (Non-gallery)”
Click Create at the bottom of the screen
Configure SAML on the new Enterprise Application
In the All applications tab of Enterprise applications, click on the new application. Then click on Single sign-on or Set up single sign on under Getting Started
Select the SAML option
In a separate web browser tab/window, navigate to the SAML metadata endpoint for the customer’s SwiftComply site (e.g. https://charlottenc.c3swift.com/saml/metadata). Download the page as an XML document (e.g. browser options > Save Page As… > save file with .xml extension).
In Entra, on the application SAML-based Sign-on screen, click Upload metadata file, and upload the XML file you just downloaded.
After uploading the SAML metadata file, you should see new URLs configured under Basic SAML Configuration. For example:
Scroll down to the SAML Certificates section and copy the value for App Federation Metadata Url
Provide this URL to SwiftComply to complete the SSO integration configuration.