PC Matic + Microsoft Entra ID SAML Setup

PC Matic + Microsoft Entra ID SAML Setup

Overview

This guide explains how to configure SAML Single Sign-On (SSO) between Microsoft Entra ID and PC Matic.

Prerequisites

Before you begin:

• Microsoft Entra ID administrator permissions
• Administrator access to the PC Matic Management Console
• Access to the PC Matic Identity Provider configuration page

Step 1: Create an Enterprise Application

1. Sign in to the Microsoft Entra Admin Center.
2. Navigate to Identity > Applications > Enterprise Applications.
3. Select New Application.
4. Select Create your own application.
5. Enter a name such as PC Matic.
6. Select Integrate any other application you don't find in the gallery (Non-gallery).
7. Click Create.

Step 2: Configure SAML Authentication

1. Open the newly created Enterprise Application.
2. Navigate to Single Sign-On.
3. Select SAML.

In the PC Matic Management Console, navigate to the Identity Provider Setup page.

Copy the following values:

• ACS / Reply URL
• SP Entity ID

Configure the Basic SAML Configuration section:

Save the configuration.

Step 3: Configure User Claims

PC Matic requires the user's email address.

PC Matic can receive the email address through either:

• The SAML NameID
• The required email claim

Verify that users will provide their email address through at least one of these methods.

If adding a custom claim, configure:

If your organization uses UPN as the primary login identifier, ensure the value matches the user's email address recognized by PC Matic.

Step 4: Obtain Federation Metadata

1. In the SAML Signing Certificate section, locate the App Federation Metadata URL.
2. Copy the URL.

Return to the PC Matic Management Console and paste the URL into the Identity Provider Metadata URL field.

Save the configuration.

Step 5: Assign Users and Groups

1. Navigate to Users and Groups.
2. Select Add User/Group.
3. Assign the users and groups that require access to the PC Matic Management Console.

Note: These assignments control access to the PC Matic Management Console and are not necessarily related to endpoint deployment.

Validation

Verify:

• Users can launch the application from Entra ID.
• SAML authentication succeeds.
• Email addresses resolve correctly.
• Users appear in PC Matic.
• No claim-related authentication errors occur.

Common Issues

User Not Found

Verify:

• The email claim is being sent.
• NameID contains the correct email address.
• The user exists within PC Matic.

Invalid Audience

Verify:

• Identifier (Entity ID) matches the SP Entity ID displayed in PC Matic.

Reply URL Mismatch

Verify:

• Reply URL matches the ACS URL displayed in PC Matic.