---
title: "Configure SAML 2.0 SSO for EasySignage with Azure Active Directory"
description: "Learn how to set up SAML 2.0 SSO for seamless single sign-on, enhancing security and streamlining access to your applications effortlessly."
url: https://easysignage.com/help/integrations/ad-sso/
---

# Setup SAML 2.0 SSO for EasySignage and Azure Active Directory

Learn how to set up Active Directory Single Sign-On (SSO) with EasySignage, letting users log in using their AD credentials for centralized, secure access.

## Prerequisites:

-   Azure AD is your Identity provider

-   SAML 2.0 SSO configuration works with the following Azure Plans:

    -   Pro Plus
    -   Enterprise plan
-   You have a sub domain of EasySignage and you require SAML 2.0 SSO to authenticate your users.

## Configurations needed in your Azure AD console

_Important: Login to Azure AD as **admin**_

### Add an Enterprise Application in your Azure AD portal:

-   Go to **Enterprise applications**.
-   Click on **New Application**.

![Enterprise Application](https://easysignage.com/help/assets/img/ad/1-ad-enterprise-application.jpg)

-   Click on **Create your own application**.
-   Enter _EasySignage_ as the name of the app.
-   Choose **Integrate any other application you don’t find in the gallery (Non-gallery)**.
-   Click **Create**.

![Create Application](https://easysignage.com/help/assets/img/ad/2-ad-create-app.jpg)

-   Click on Setup Single Sign on

![Setup SSO](https://easysignage.com/help/assets/img/ad/3-ad-setup-sso.jpg)

-   Click on SAML in the Select a single sign-on method step

### Step 1

-   Click Edit in Basic SAML Configuration, then in the dialog:

    -   Click on **Add Identifier** Identifier (Entity ID): this is your unique identifier provided by EasySignage support team, paste it here
    -   Click on **Add reply URL** to add Reply URL (Assertion Consumer Service URL): Copy this URL and add it:

    ```
    https://cloud-digitalsignage.com/__/auth/handler
    ```

-   Click **Save**

-   Your settings will look like the following:

![Edit Basic SAML](https://easysignage.com/help/assets/img/ad/4-ad-edit-basic-saml.jpg)

### Step 2

-   Under Attributes & Claims, click on Edit

![Attributes and Claims](https://easysignage.com/help/assets/img/ad/8-attributes-claims.jpg)

-   Click on **Add a group claim**

![Group Claim Settings](https://easysignage.com/help/assets/img/ad/9-group-claim.jpg)

-   Choose Security Groups
-   Check **Customize the name of the group claim**
-   Type in _groups_
-   Click Save

![Group Claim Settings](https://easysignage.com/help/assets/img/ad/10-group-claim-settings.jpg)

### Step 3

-   In **SAML Certificates**,
-   From Certificate (Base64), Click on Download. This file should be sent to EasySignage Support Team.

![Certificate](https://easysignage.com/help/assets/img/ad/5-ad-download-certificate.jpg)

### Step 4

-   In Setup \[EasySignage\], copy the 2 below URLs, and send to EasySignage support team.

![Setup URLs](https://easysignage.com/help/assets/img/ad/6-ad-setup-urls.jpg)

## Map AD groups to EasySignage Accounts

-   We require to create groups and map them to EasySignage accounts, it is recommended to have seperate AD groups for your digital signage app.
-   Get the Group ID from Azure AD and provide it to EasySignage support Team and specify to which EasySignage user it should be mapped.
-   In Azure AD, go to Groups, locate your group and copy its **Object ID**

![Group ID](https://easysignage.com/help/assets/img/ad/7-group-id.jpg)

_To manage user roles in EasySignage, refer to [Teams](https://easysignage.com/help/user_mgmt/teams) ._

[Previous ##### SSO OneLogin](https://easysignage.com/help/integrations/onelogin/)