How to enable Microsoft Azure Single Sign-on

This guide will provide step-by-step instructions on configuring Microsoft Azure for Single sign-on access to your The Brief account. 

How to Set up Microsoft Azure SSO?

1. Go to portal.azure.com
2. Search for Microsoft Entra ID.

Create the application

1. On the Manage submenu, go to Enterprise applications, and select New application.
2. Select Create your own application, type in a name, and click Create.
3. From the Manage submenu, navigate to Single-sign-on and select SAML.
4. Here, you have two options:
   • Add Identifier (Entity ID): https://auth.thebrief.ai/auth/realms/creatopy Reply URL: https://auth.thebrief.ai/auth/realms/creatopy/broker/{YOUR_ALIAS}/endpoint and Logout URL (same as Reply URL), and click Save.
   • Click the Upload metadata file (on the upper side of the page) and upload the file downloaded from the The Brief SSO SAML settings page¹.
5. Copy the App Federation Metadata URL into the Autoconfig URL in the The Brief SSO settings.
6. For Mappers, go to Attributes & Claims, and add:
   • firstName: Given name.
   • lastName: Surname.
   • email: Email address.
7. To add users to the application, head over to the Manage submenu, select Users and groups, click on Add user / group , and select the users.

Create users

1. On the Microsoft Entra ID page, head over to the Manage submenu and select Users.
2. Select New user and click on Create new user².
3. Fill in user data (besides the mandatory ones, provide first name and last name for later use), then click Review & Create.

Note¹: If the Logout URL is missing, you can add it from Basic SAML Configuration (the same as REPLY URL)

Note²: By default, Microsoft creates an email domain for the Azure account (onmicrosoft.com). You can also add your own domain.