Azure Entra SAML Setup

This article explains how to: 

• Create an EliseAI application in Azure Entra using SAML.
• Obtain the SSO Login URL and X.509 Certificate to share with EliseAI. 

1. On the Default Directory Overview page, select Enterprise applications from the left sidebar.
2. Click New application at the top of the page.
3. Click Create your own application at the top of the page.

4. In the right side panel that pops up, enter "EliseAI" as the Input name. 

   • Make sure to select "Integrate any other application you don't find in the gallery (Non-gallery)".

   

5. Select Single sign-on from the left sidebar.
6. Select SAML as the single sign-on method.
7. Click Edit in the top right of the Basic SAML Configuration box.
8. In the right side panel that pops up, click Add identifier and input the EntityID. 
9. In the right side panel, click Add reply URL and input the ACS.
10. Click Edit in the User Attributes & Claims section, then Add new claim for the following fields:
    1. location → Source attribute: user.physicalDeliveryOfficeName (or anywhere property access is defined for users)
    2. title → Source attribute: user.jobTitle (or anywhere role/title is defined for users)
11. Click Save, confirm both appear under User Attributes & Claims, and test SSO to ensure the new claims are included in the SAML response.

12. Once complete, send us two pieces of information from the SAML-based Sign-on page:

    • Download and send the Certificate (Base64) from the SAML Certificates box.
    • Copy and send the Login URL from the Set up SamlWalkthrough1 box. 

    

13. Assign all users or groups access to the EliseAI app by going to Users and groups → Add user/group. Select the desired users or groups, then click Assign.
14. Enter the information found in step 12 to the SSO Settings page in AI Portal.