Microsoft Azure Identity Provider

The following guide shows how to configure Microsoft Entra ID (formerly Azure Active Directory) as a SAML identity provider for Veezoo.

Create an enterprise application

1. Log into the Microsoft Azure Portal

2. In the sidebar, navigate to Microsoft Entra ID (shown as Azure Active Directory in older versions of the portal) then to Enterprise Applications

3. Click on New Application then on Create your own application

4. Enter a name for the application and click on Create

Configure single sign-on

1. Open the enterprise application created above and click on Setup single sign on then on SAML

2. In the Basic SAML Configuration section, click on Edit to edit the configuration

   • set the Identifier to: https://veezoo.com/saml
   • set the Reply URL to: https://<subdomain>.app.veezoo.com/saml/callback
   • set Sign on URL to: https://<subdomain>.app.veezoo.com/

   Don't forget to replace <subdomain> by the actual subdomain attributed to your organization. The above information is available in and can be copied from Veezoo Admin, see here.

3. In the Attributes & Claims section you can optionally configure the attributes to be included in the SAML assertions that are sent to Veezoo

   These attributes can be used when configuring user attributes in Veezoo.

4. Click on Save and close the editing form

5. Download the Federation Metadata XML from the SAML Signing Certificate

   The contents of this file need to be entered when configuring the identity provider in Veezoo.

Provide access to users

1. Open the enterprise application created above and click on Assign users and groups

2. Click on Add user/group

3. Select the users or groups to grant access to Veezoo and click on Assign

Configure Veezoo

Configure and enable single sign-on in Veezoo Admin according to the documentation.