Setup and Configuration Guide for Azure ADFS

Contact Butterfly Support to set up your custom logon sub-domain.
- Example: https://myhospital.butterflynetwork.com
Provide your preferred email address to Butterfly Support to grant you access as an Enterprise Administrator. Only an Enterprise Admin account can access the security configuration settings within Butterfly Cloud.

Log into Butterfly Cloud with your Enterprise Admin account.
1. Your login page will be at your Butterfly Network Enterprise URL.
Click your user initials in the top right of the window and select Enterprise Settings.
SSO is the first tab, which allows you to configure the Single Sign-On integration with your corporate Identity Provider (IdP) solution.
Service Provider Details for all IdP solutions
- SSO URL: https://sso.butterflynetinc.com/saml2/idpresponse
- Logout URL: https://<your-domain>.butterflynetwork.com/-/federated-auth/logout
- Entity ID (aka Audience): urn:amazon:cognito:sp:us-east-1_DPQCgPjWG
- Attribute Mappings
  
  Email Address: NameID
  
  Email Address: DomainUser.Email
- Signing certificate: http://manual.butterflynetwork.com/SSO-butterfly-public-cert.pem
1. Examples include: Okta, Imprivata, Microsoft ADFS
It is recommended to keep both Allowed Login Types enabled during the transition period to SSO authentication.
1. Once you have successfully validated the SSO integration you may disable the ability for users to login with Butterfly Credentials.
Service Provider Details - this information is static for your instance of Butterfly Enterprise. Please enter the provided information when configuring Butterfly Network as an SSO-enabled application in the configuration screen(s) of your Identity Provider’s (IdP) software.

On the Azure homepage, navigate to the "Enterprise Applications" service.

Click "Set up single sign on".
Click "SAML".
Edit the Basic SAML Configuration to match the following:
1. SSO URL: https://sso.butterflynetinc.com/saml2/idpresponse
2. Logout URL: https://<your-domain>.butterflynetwork.com/-/federated-auth/logout
3. Entity ID (aka Audience): urn:amazon:cognito:sp:us-east-1_DPQCgPjWG
4. Entity ID (aka Audience): urn:amazon:cognito:sp:us-east-1_DPQCgPjWG
  1. Email Address: NameID
  2. Email Address: DomainUser.Email
In the Logout Url field, replace "your-domain" with the subdomain of your enterprise cloud.
Edit the "User Attributes & Claims" to match the following:

You may map each claim from any value that contains the user's email.

Go to your Butterfly Network subdomain address. E.g. https://myhospital.butterflynetwork.com
Select the Login with Company Name Option (Blue Button).
Ensure that you are taken to your corporate IdP login page.
Login with your corporate credentials - you should be automatically taken to Butterfly Cloud upon successful login.
Logout from Butterfly Cloud - you should be taken back to the Butterfly Cloud login page.

Open the Butterfly iQ App on your mobile device.
At the login screen - tap the Enterprise User? Log in here option.
On the following screen enter your Butterfly Network subdomain. (e.g. myhospital.butterflynetwork.com).
Select the Login with Company Name Option (Blue Button). Note: If you have enabled MDM Shared Device Rapid Log In this step will be skipped.
Ensure that you are taken to your corporate IdP (mobile) login page.
Login with your corporate credentials - you should be automatically taken to the Butterfly iQ App upon successful login.
Logout from Butterfly iQ App - you should be taken back to the corporate Butterfly iQ App login page.