Microsoft Entra

Set up SAML SSO with Microsoft Entra (formerly Azure AD). See the common values shared across all providers.

Steps

1. Go to the Microsoft Entra admin center.

2. Click + New Application.

3. Click + Create your own Application.

4. Select Integrate any other application you don't find in the gallery (Non-gallery).

5. In the application window, go to Single sign-on and select SAML.

   

6. Fill the basic SAML configuration as shown:

   • Identifier (Entity ID): Sundial
   • Reply URL (ACS URL): https://sundial-fe060.firebaseapp.com/__/auth/handler

7. Configure Attributes & Claims — add these two claims exactly as shown:

   Claim name	Value / Source
   email	the user's email address
   displayName	Transformation → Trim(user.displayname)

   The email claim:

   

   The displayName claim (set via a Transformation that trims user.displayname):

   

8. Get Sundial access to the following from the single sign-on window, and share them with the Sundial team:

   • Certificate (Base64) — download and share with the Sundial team
   • Login URL
   • Microsoft Entra Identifier

Username / Name ID must be email

Make sure the user identifier resolves to the user's primary email — Sundial matches users by email.