Table of Contents
Overview
SAML integration allows users to authenticate with the MedMe Platform through their organization's identity management system (e.g., Microsoft Login), eliminating the need for separate MedMe credentials for each user.
Please Note: Users will be redirected to their corporate login screen to authenticate, then returned to MedMe upon successful login.
Key Terms
Identity Provider (IdP)
A system that manages user identity and authentication.
Example: Azure Active Directory (Azure AD)
Security Assertion Markup Language (SAML)
A standard for exchanging authentication and authorization data between an identity provider and a service provider.
Service Provider (SP)
An application (e.g., MedMe) that relies on an IdP to authenticate users.
MedMe's SAML Setup
Service Provider (SP):
Amazon Cognito (used by MedMe)
Identity Provider (IdP):
Azure AD (most commonly used by enterprise pharmacy clients)
For Instance: A pharmacy chain using Azure AD for employee logins can connect that same system to MedMe, so staff use their existing corporate credentials instead of a separate MedMe password.
Enterprise Setup Instructions
Step 1: Create a New Enterprise Application
In Azure AD, go to Enterprise Applications.
Click + New Application.
Select Non-gallery Application.
Step 2: Configure Single Sign-On (SSO)
Choose SAML as the SSO method.
In the Domain and URLs section, enter:
Identifier (Entity ID)
Reply URL (ACS)
Logout URL
Reminder: MedMe will send these unique values via email. Enterprise clients should not generate these values independently.
Step 3: Provide SAML Metadata to MedMe
Save the SSO configuration in Azure AD.
Send MedMe the following:
The Metadata URL
The Metadata XML
MedMe uses this information to finalize your integration.
Step 4: Configure Attributes and Claims
Ensure SAML assertions include the following user fields:
First Name
Last Name
Email
Store(s)
Role
License Number (if applicable)
Please Note: Configure Group Claims if using Azure AD groups for access control.
Step 5: Add Users
Assign users to the new application in Azure AD to grant them MedMe access.
Step 6: Test the Integration
In the Azure portal, open the application's Single Sign-On section.
Click Test SAML Settings.
Tip: Verify that the login redirects, user fields, and access permissions are all functioning correctly before rolling the integration out to the full team.
Troubleshooting
Login does not redirect to the corporate sign-in screen
Confirm the Identifier (Entity ID), Reply URL (ACS), and Logout URL were entered exactly as provided by MedMe.
User fields (e.g., Role, Store) are missing after login
Check that all required fields are included in the Attributes and Claims configuration in Step 4.
A user cannot access MedMe after SSO is configured
Verify the user has been assigned to the enterprise application in Azure AD (Step 5).
Warning: If Metadata XML is updated on the Identity Provider side after the initial setup, notify MedMe immediately so the Service Provider configuration can be updated. Mismatched metadata will cause authentication failures.
Conclusion
SAML integration simplifies user access to MedMe through corporate credentials, enhancing both security and user management across enterprise pharmacy teams.
For related setup steps, see: How to Create and Manage a Pharmacist Account.
For assistance, contact the MedMe team at care@medmehealth.com.






