1. PrecisionLender Support Center
  2. Technical Support
  3. Configuring Your Account for Single Sign-on

Creating a Q2 Relationship Insights application within Azure Active Directory to support Single Sign-On

If you'd like to set up PrecisionLenderQ2 Relationship Insights, powered by PrecisionLender authentication via a Microsoft Azure Active Directory, you will first need to create a new Enterprise Application within your Azure AD.

  • Log into your Azure Portal ( https://portal.azure.com ), navigate to your Azure Active Directory, and then click on Enterprise Applications.

Enterprise applications All applications page with the New application button available.

  • Click on New application and choose Non-gallery application.

Add your own app options showing Application you’re developing, On-premises application, and Non-gallery application.

  • Enter a name for the application such as PrecisionLenderQ2 Relationship Insights.

Add an application page showing the Non-gallery application option and the Add your own application pane with an application name entered.

  • If you'd like for any AD user to be able to attempt a login regardless of assignment within your AD, go to the Properties tab and change User assignments required to No. Note that users will still need to have an active user account within PrecisionLenderQ2 Relationship Insights to actually log into the system. This option merely allows them to attempt the SSO login process past the point of your AD.

Enterprise application Properties page with User assignment required? set to No and highlighted.

  • On the application's Single sign-on tab, select SAML.

Single sign-on method selection page showing the SAML option alongside Disabled, Password-based, and Linked options.

  • On the Set up Single Sign-On with SAML page, in the Basic SAML Configuration section, select the edit icon.

    Set up Single Sign-On with SAML page showing the Basic SAML Configuration section, with Identifier and Reply URL marked as required and the edit icon available.

  • To save your configuration, enter the following two required values:

    Basic SAML Configuration page showing the Identifier and Reply URL fields completed, with Sign on URL, Relay State, and Logout URL left blank.

  • Configure a Sign on URL or Relay State URL only if users initiate sign-in directly from Azure. Email PrecisionLenderQ2 Relationship Insights Support to obtain the required URL or for guidance on an IdP-initiated workflow.

  • Select Save.

  • If prompted to validate the configuration, select No, I'll validate later.

Validation prompt for single sign-on with Yes and No, I’ll validate later buttons.

  • On the Single sign-on tab, download the Federation Metadata XML file to your computer.

SAML Signing Certificate section with the Federation Metadata XML download link highlighted.

  • Provide the file to PrecisionLenderQ2 Relationship Insights so that support can complete your SAML setup.

Articles in this section