LogoLogo
More help and supportPhocas website
  • Home
  • Getting started
    • Navigation
    • Homepage
    • Data access
    • User licenses, profiles and permissions
    • Account settings
    • Databases
    • Periods
      • Offset dates
      • Default period for a database
    • Sharing and folders
      • Share a dashboard, favorite, or alert
    • Subscriptions
  • Analytics
    • Take a tour of Analytics
    • Work with the grid
    • View a summary of the data
    • Customize your view (Analytics)
      • Change the mode
        • Period mode
        • Period Variance mode
        • Period Stream mode
        • Moving mode
        • Stream mode
        • Total mode
        • Transaction mode
        • Matrix mode
        • Matrix Variance mode
        • Matrix Share mode
        • Variance mode
        • Search mode
        • Market mode
        • Custom mode
      • Change the properties (Analytics)
      • Change the measures (Analytics)
      • Change the stream
      • Use the activity filter
      • Change the data format
      • Change the period (Analytics)
    • Drill down into your data (view transactions)
    • Filter data (use dimensions)
    • Select data (Analytics)
    • Focus on data (Analytics)
    • Copy or export data
    • Search for data
      • Perform a basic search
      • Perform an advanced search
      • Search for similar or comparative data (right-click filter)
    • Add levels to the grid (grid nesting)
    • Compare data with Matrix mode
    • Get more options for viewing data
    • Visualize your data in a chart
      • Bar and Column charts
      • Combo chart
      • Pareto chart
      • Waterfall chart
      • Line chart
      • Area and % Area charts
      • Pie and Donut charts
      • Bubble chart
      • Radar chart
      • Gauge chart
      • Bullet chart
      • Summary and Ring Summary charts
      • Map charts
      • Configure the chart options
      • Select and focus on a chart segment
      • Export a chart as an image
      • Use the chart legend
    • Save favorites and add to dashboards (Analytics)
    • Reset data
    • Phocas AI
    • Flex Modes
      • Switch modes
      • Filter data (Flex Modes)
      • Apply conditional formatting
      • Add levels to the grid (Flex Modes)
      • Manage columns (Flex Modes)
      • Save and share a favorite (Flex Modes)
      • View your data in a chart (Flex Modes)
  • Financial Statements
    • Take a tour of Financial Statements
    • Overview of access to financial statements
    • Customize your view (Financial Statements)
      • Change the properties (Financial Statements)
      • Change the measures (Financial Statements)
      • Change the period (Financial Statements)
      • Change the current data
      • Change the budget data
      • Change the columns
      • Change the style
      • Change the rows (activity filter)
    • Filter the financial information
    • Select and focus on data (Financial Statements)
    • Copy or export financial information
    • Add a level in a financial statement
    • View financial information in a matrix (change column groups)
    • Add and view comments (Financial Statements)
    • View transactions (Financial Statements)
    • View financial information in a chart
      • Create a Pie and Donut chart (Financial Statements)
      • Create a Value card
      • Export a financial chart widget as an image
    • Save and share favorites (Financial Statements)
    • Add financial analysis to a dashboard
    • Manage financial statements
      • Overview of financial statements and dimensions
      • Create a financial statement
      • Delete a financial statement
      • Customize a financial statement
        • Rename a financial statement
        • Reorder a financial statement
        • Customize account groups
        • Customize calculations
          • Functions for Profit & Loss calculations
          • Formulas for financial ratios
        • Customize headings and spacers
        • Set the revenue row in a Profit & Loss statement
        • Customize columns
        • Customize a Cash Flow statement
          • Common account mapping for Cash Flow statements
        • Rebuild the database
      • Set the financial year end date
      • Map the Retained Earnings account(s)
      • Restrict access to accounts
      • Manage budget streams (Financial Statements)
        • Create a budget (Financial Statements)
      • Use statistical streams
      • Use multiple currencies
      • Manage dimension groups
      • Map categories from your Chart of Accounts
  • Budgets & Forecasts
    • Overview of key terms and concepts
      • Budgets versus forecasts
      • Users and data access
      • Relationship with the Financial Statements module
      • 3-statement budgeting
      • Filtering methods
      • Demand planning
      • Loan repayments
    • Take a tour of Budgets & Forecasts
      • Explore the budget workbook
      • Explore the forecast workbook
      • Explore the Balance Sheet and Cash Flow budgets and forecasts
    • Customize your view (Budgets & Forecasts)
      • Filter a worksheet (search for items)
      • Group period columns
      • Use layouts
    • Use session filters
    • Edit values in a worksheet
      • Open workbook notes
      • Use keyboard shortcuts
      • Copy and paste values
      • Use comparison rows
      • Use sum and working lines
      • Use formulas
      • Spread totals
      • Revert to the baseline values
      • Edit the Balance Sheet budget
      • View and use headcount data
    • Refresh a workbook
    • Use workflows
      • Contribute to the workflow
      • View the workflow history
      • View workflow comments
    • View budget information in a chart
    • Open baseline, comparative, or opening balance data
    • Review the budget or forecast
      • Add and view cell comments
      • View and restore the cell history
      • View the audit log
      • Compare actuals, budgets and forecasts
    • Export a workbook or worksheet tab
    • Manage budgets and forecasts
      • Create a budget workbook
        • Filtered budget or forecast
        • Multi-currency budget
        • Unclassified data
        • Period types in budgets
        • Additional measures for driver-based budgeting
      • Create a forecast workbook
      • Clone a workbook
      • Import a budget or forecast
      • Edit the workbook setup
      • Roll a budget forward
      • Add more detail to a budget or forecast
      • Add worksheet tabs (drivers)
        • Balance Sheet and Cash Flow tabs
        • Manual Entry tab
        • Database tab
        • Headcount tab
          • Headcount tab FAQs
        • Reference tab
        • Lookup tab
        • Allocations tab
        • Scratch Pad tab
      • Manage worksheet tabs
      • Add notes to a workbook
      • Customize the format of measures
      • Manage the workflow
      • Manage user access and notifications
      • Publish a budget, forecast or other worksheet tab
      • Fix the baseline in a budget
      • Delete or restore a workbook
      • Delete a stream (Budgets & Forecasts)
      • Troubleshoot performance issues
  • Rebates
    • Overview of rebates
    • Get started with Rebates
    • Projects
    • Rules
      • Parent-child rebate rules
      • Rebates calculation methods
      • Yearly rebates
      • Quarterly rebates
      • Monthly rebates
      • Whole rule period rebates
      • Retrospective rebates
      • Pro rata rebates
    • Calculations
      • Run a calculation
      • Schedule calculations
      • View calculation results and transactions
      • Post calculation results
    • Seasonal calendars
    • Rebates analysis
    • Rebates near miss analysis
  • CRM
    • Overview of CRM
    • Agenda
    • Contacts
    • Accounts
    • Leads
    • Activities
      • Microsoft 365 Outlook calendar integration
    • Campaigns
    • CRM analysis
    • CRM administration
  • Favorites
    • Save a favorite
    • Manage favorites
    • Set a favorite as your default view
    • Use alerts
  • Dashboards
    • Use dashboards
    • Create a dashboard
    • Set a dashboard as your homepage
    • Manage dashboards
  • Administration
    • Overview of access to data (Administration)
    • Users
      • Add, update or delete a user account
        • User maintenance form
        • User permissions
      • Create a user template
      • Manage a user's database access and restrictions
      • Manage user passwords
      • Monitor user activity
      • Lock user accounts
      • Impersonate a user
    • Profiles
    • Folders (Administration)
    • Favorites (Administration)
    • Dashboards (Administration)
    • Subscriptions (Administration)
    • Periods (Administration)
      • Period types
      • Working days
    • Databases (Administration)
    • Sync Sources
    • Connectors
    • Configuration
      • Set up SSO
      • Set up SSO with Microsoft Entra ID
    • Logs
    • Designer
      • Modify a database
      • Get your data into Phocas
      • Design a database
        • Create a database
        • Add (connect) data to a database
        • Map data to the database
        • Save your database design
      • Design a financial database
      • Build a database
      • View and revert to older design versions
      • Add a budget file to a financial database
      • Add a budget file to a non-financial database (easy budget upload)
    • Sync
      • Automatically join or split items during Sync (split view)
      • Schedule the sync process
      • Migrate Sync
      • Test the sync process
    • Reserved words and characters
    • End of year maintenance tips
  • OTHER INFORMATION
    • File upload
    • Encrypt (share secrets)
    • Glossary
    • Release notes
      • Analytics release notes
      • Financial Statements release notes
      • Budgets and Forecasts release notes
      • Rebates release notes
      • Administration release notes
    • System requirements
    • Technical limitations
    • Security information
    • Scheduled upgrade and maintenance periods
    • More help and support
Powered by GitBook

© Phocas Software

On this page
  • Step 1: Set up SSO in Entra
  • Step 2: Activate the SSO feature in Phocas
  • Step 3: Enter the Phocas SSO details into Entra
  • Step 4: Enter the Entra SSO details into Phocas
  • Step 5: Complete the SSO setup in Phocas
  • Step 6: Add the Phocas users and groups into Entra
  • Step 7: Update the Phocas accounts with the Entra usernames
  • Troubleshooting

Was this helpful?

  1. Administration
  2. Configuration

Set up SSO with Microsoft Entra ID

PreviousSet up SSONextLogs

Last updated 1 month ago

Was this helpful?

User permission: Administration > Configuration

To learn about SSO in Phocas, see .

This page outlines how to set up Phocas and Microsoft Entra ID (Entra), previously called Azure AD, to allow single sign-on (SSO) for your Phocas site.

This is an advanced technical process typically carried out by the IT person in your organization with access to Entra. It involves moving between the two applications in seven key steps, as outlined below. At the bottom of the page, you'll find some troubleshooting tips.

Step 1: Set up SSO in Entra

  1. In your Microsoft Entra admin center, click Enterprise applications.

  2. Click + New application.

  3. Click + Create your own application.

  4. Enter a name for the application.

  5. Select this option: Integrate any other application you don’t find in the gallery (Non-gallery).

  6. Click Create.

  7. In the 2. Set up single sign on tile, click Get started.

  8. Click SAML.

  9. In the Basic SAML Configuration panel, click the Edit button. Keep this screen open and proceed to step 2 below.

Step 2: Activate the SSO feature in Phocas

  1. In the Phocas menu, click Administration > Configuration.

  2. Click the Single sign-on (SSO) tab.

  3. Select the Allow SSO via SAML checkbox. The SAML configuration settings display. Keep this screen open and proceed to step 2 below.

Step 3: Enter the Phocas SSO details into Entra

With both the Phocas and Entra screens open side-by-side:

  1. In Phocas, in the Service provider (SP) section, copy the Entity ID.

  2. In Entra, in the Identifier (Entity ID) section, click Add identifier and paste the ID into the box.

  3. In Phocas, copy the ACS URL.

  4. In Entra, in the Reply URL (Assertion Consumer Service URL) section, click Add reply URL and paste the URL into the box.

  5. In Entra, click Save and close the panel. Continue to keep both the Phocas and Entra ID screens open side-by-side.

Step 4: Enter the Entra SSO details into Phocas

The new Microsoft Enterprise app you created above takes approximately 5 to 10 minutes to be properly provisioned, after which the certificate changes. Please wait sometime before you take the next steps to ensure you use the correct certificate.

With both the Phocas and Entra screens open side-by-side:

  1. Obtain the Entra SAML certificate:

    1. In Entra, on the Single Sign On page, scroll down to the 3 SAML Certificates section and download the Certificate (Base64) file.

    2. Open the downloaded certificate file in Notepad and copy all the contents.

  2. In Phocas, in the Identity Provider (IP) section, paste the copied certificate contents into the X509 Certificate box.

  3. In Entra, in section 4, copy the Login URL.

  4. In Phocas, in the Identity Provider (IP) section, paste the IRL into the Login URL box.

  5. In Entra, copy the Microsoft Entra Identifier.

  6. In Phocas, in the Identity Provider (IP) section, paste the identifier into the Entity ID box.

Step 5: Complete the SSO setup in Phocas

  1. In Phocas, in the Identity Provider (IP) section, enter a name for the provider, for example, My Company SSO. This will display as a button on your Phocas Sign in page.

  2. Click Save.

Step 6: Add the Phocas users and groups into Entra

  1. In Entra, click Users and groups in the left-hand menu.

  2. Click + Add user/group.

  3. Click None selected.

  4. Locate and select the user(s) or group(s) you want to have access to Phocas, then click Select at the bottom.

  5. Click Assign.

Step 7: Update the Phocas accounts with the Entra usernames

The usernames depend on the source attribute sent from Entra. This can be found in the Single sign-on > Attributes & Claims section.

Here’s an example of updated usernames in Phocas:


Troubleshooting

If the user signs in to Phocas using SSO and returns to the Sign in page, the issue is most likely a user authentication issue. The username in Entra must match the username in Phocas; just a matching email address will not work.

Otherwise, it could be that:

  • The Base64 certificate is out of date. When you create the new Microsoft Enterprise app, it takes approximately 5 to 10 minutes for it to be properly provisioned. After it's provisioned, the Base64 certificate changes. If you download and use the certificate before the app is provisioned, the sign-in process won't work. Download the certificate again, open and copy the updated contents, then paste it into into the into the X509 Certificate box in Phocas (see step 4 above).

  • Something else in the configuration in Phocas is wrong. Repeat the steps above to set up the configuration again.

Select the required SAML options: Use enhanced SAML security, Update user account with details from IdP on user sign-on, and Automatically create user account if none exists. See the bottom of the for information about these settings.

In Phocas, (or create new user accounts) to use the Entra usernames. For example, use the email address or User Principal Name (UPN).

If you continue to have issues after setup, please .

Set up single sign-on (SSO)
update the user accounts
contact our Support team
image-20240725-012819.png
image-20240725-012227.png
image-20240319-024807.png
Configuration > Single sign-on settings