Setup Instructions for Adding Doximity on Microsoft Azure/Entra ID

  1. Go to https://portal.azure.com and log in as a Global Administrator. 
    (Or as a user able to register non-gallery enterprise applications)
     
  2. Open Azure Active Directory. 
    (Usually under "More services")

     
  3. Go to Enterprise applications under the sidebar.

     
  4. Click  + New Application.

     
  5. Next, click on + Create your own application.

     
  6. Type Doximity as the name of your app, and select Integrate any other application you don't find in the gallery (Non-gallery), then click Next.

     
  7. Click Set up single sign on.

     
  8. Select the SAML single sign-on method.

     
  9. Under Step 1 - Basic SAML Configuration, click the Edit button.

     
  10. On the Basic SAML configuration interface, fill out the following fields:
Identifier (Entity ID) https://sso-connect.doximity.com 
Reply URL (Assertion Consumer Services URLS)

https://sso-connect.doximity.com/auth/saml/organization_identifier *


 

* organization_identifier to be provided by Doximity
Sign on URL (Optional) Leave blank
Relay State (Optional)

For Amion application:
{"redirect_to":"https://www.amion.com/organizations"}

For Dialer application:
{"redirect_to":"https://www.doximity.com/dialer/home"}
Logout URL (Optional) Leave blank
  • Once you have filled out the fields as specified above, click Save on the top left. 
    Once saved, click the X on the top right to close the sidebar interface.

     
  1. Closing the sidebar will return you to the main Set up Single Sign-On with SAML interface. 
    Under Step 2 - Attributes & Claims, click the Edit button.

     
  2. Set up the Attributes to match the table below. 
    For more information on attributes, please see this Microsoft support page. 

Name

Namespace

Source

Source attribute
emailaddress http://schemas.xmlsoap.org
/ws/2005/05/identity/claims		 Attribute user.mail
givenname http://schemas.xmlsoap.org
/ws/2005/05/identity/claims		 Attribute user.givenname
name http://schemas.xmlsoap.org
/ws/2005/05/identity/claims		 Attribute user.userprincipalname
surname http://schemas.xmlsoap.org
/ws/2005/05/identity/claims		 Attribute user.surname
jobtitle http://schemas.xmlsoap.org
/ws/2005/05/identity/claims		 Attribute user.jobtitle
address http://schemas.xmlsoap.org
/ws/2005/05/identity/claims		 Attribute user.streetaddress
city http://schemas.xmlsoap.org
/ws/2005/05/identity/claims		 Attribute user.city
state http://schemas.xmlsoap.org
/ws/2005/05/identity/claims		 Attribute user.state
postalcode http://schemas.xmlsoap.org
/ws/2005/05/identity/claims		 Attribute user.postalcode
mobile http://schemas.xmlsoap.org
/ws/2005/05/identity/claims		 Attribute user.mobile
dateofbirth http://schemas.xmlsoap.org
/ws/2005/05/identity/claims		 Attribute user.dateofbirth
  1. Once you have set up the attributes as specified, return to the Set up Single Sign-On with SAML interface. Under Step 3 - SAML Certificates, look for the link next to App Federation Metadata Url. 
    Click the copy icon to copy the link, and send that URL to Doximity by replying to our email. 
    This will enable us to continue the process on our side.

     
  2. Before you finish, please enable one or more users to this application. 
    This can be done by going to Users and groups under the Enterprise Application side bar.

Setup Instructions for User Provisioning on Azure AD

  1. Before starting these steps, please send a confidential/encrypted email to your Doximity resource to receive the Provisioning API token needed for Step 8-b.
     
  2. Go to https://portal.azure.com and log in with a Global Administrator.
    (or with a user able to manage non-gallery enterprise applications)
     
  3. Open Azure Active Directory .
    (usually under "More services")

     
  4. Go to Enterprise applications under the sidebar.

     
  5. Find the Doximity application and click to manage it.

  1. Go to Provisioning under the sidebar.

  1. Click on Get Started to start the setup.

  1. Select Automatic under the Provisioning Mode and then fill out the Admin Credentials section as follows:

  1. Go back to the Mappings section and edit the Provision Azure Active Directory Users mapping.
     
  2. In the Attribute Mappings section, edit the userName mapping and change the Matching precedence to 2, then click Save.

  1. Also in the Attribute Mappings section, edit the externalId mapping as follows:
    1. Change the Source attribute to objectId.
    2. Set the Match objects using this attribute to Yes.
    3. Set the Matching precedence to 1.
    4. Then click Save.

  1. Confirm that the final mapping has the following attribute mappings, and then click Save at the top of the page.

  1. Return to the Provisioning page, set the Provisioning Status to On, then click Save.

Miscellaneous Notes

  • Groups and roles: 
    Doximity, and its products Dialer and Amion, are enterprise-wide products used across your organization by both clinical (e.g. MD, DO, RN), support clinical staff (e.g. social worker, care coordinator, scheduling) and non-clinical staff (e.g. IT). 

    Please include all groups that will cover all relevant users above. 

    To simplify group maintenance, Doximity recommends using dynamic membership rules to manage your groups. 

    For more information, please see this Microsoft Entra support page. 
     
  • Encrypted SAML Assertions: 
    Please let Doximity know if your IDP requires encrypted SAML Assertions so we can complete additional setup on the vendor side.