Skip to main content

SSO Login with SAML (Microsoft)

Set up Single Sign-On (SSO) for revel8 using Microsoft Entra ID (formerly Azure AD)

Updated over 2 months ago

👍 1: Enable single sign-on with SAML

  1. In Microsoft Entra, go to your Enterprise Application for Company Shield

  2. Click on Single sign-on → SAML

🧑‍🔧 2: Configure SAML URLs

  1. Click on Edit next to Basic SAML Configuration

  2. In a separate tab go to the revel8 dashboard and open the employees/SAML tab:

    Settings > Employees > SAML

  3. Copy and paste the following:

  • Reply URL (ACS) → Paste in Microsoft Entra from revel8’s ACS URL

  • Entity ID → Do it again: Paste in Microsoft Entra from revel8’s Entity ID

4. Click Save in the Microsoft Entra portal

⚙️ 3: Install SAML Certificate

  1. In the SAML Certificates section of Microsoft Entra: Click Download next to Federation Metadata XML

  2. Go back to revel8 → SAML tab: Upload the downloaded .xml file in the Metadata section

📌 4: Attributes and Claims

In most cases, default settings work without changes. So there is no need for changes. If needed tho, go to the Attributes and Claims sections to adopt the standard setting.

❗ http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress (required)

🔹 http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname (optional)

🔹 http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name (optional)

🔹 http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname (optional)

➕5: Assign Users and Groups

Go to Users and groups → click Add user/group, and select your users.

✅ Final Checklist

  • SAML URLs configured

  • Metadata file uploaded

  • Attributes and Claims checked

  • Test login successful

Related Articles
SSO Login with SAML (Google)
Did this answer your question?