Here's how to use Single Sign-On with Entra ID. You need to be an administrator in Upsales to set it up.

1. Activate the Enterprise Security add-on. Single sign-on requires it.
2. Click Settings → Account → Security → Single sign-on:
   
   
    
3. Scroll down to Download metadata.xml for automatic set-up of SAML and click the link below it to download the metadata file:
   
   
    
4. Login to portal.azure.com
5. Search for Entra ID and click where it appears under Services:
   
   
    
6. Click Manage → Enterprise Applications in the sidebar and click New application:
   
   
    
7. Click Create your own application and enter Upsales in the name of your app field
8. Click Integrate any other application you don't find in the gallery and click the Create button:
   
   
    
9. Click Manage → Single sign-on in the sidebar and select SAML as the SSO method
10. Click Upload metadata file and upload the file you downloaded in Step 3:
    
    
     
11. This populates the field with information Azure requires for SSO activation
12. Under Identifier (Entity ID), click Add identifier: 
    
    
     
13. In the source attribute field, choose user.mail and click Save:
    
    
     
14. Scroll to SAML Signing Certificate and click Edit:
    
    
     
15. Click Add new certificate and click the three dots (···) next to the certificate:
    
    
     
16. Click PEM certificate download, and click the three dots again and choose Make certificate active:
    
     
17. Scroll to the Set up Upsales section and copy the Login URL:
    
    
     
18. In Upsales, go to Settings → Account → Security → Single sign-on
19. Paste the URL you copied (in Step 17) into the Log in URL field:
    
    
    
     
20. Use a text editor (such as Notepad in Windows or TextEdit in Mac) to open the certificate you downloaded in Step 16
21. Copy and paste the certificate text into the Add certificate field (the pasted text should start with -----BEGIN CERTIFICATE----- and end with -----END CERTIFICATE-----), then click Save:
    
    
     
22. Copy the URL shown under Administrators can use the following URL to bypass SAML login and store it somewhere safe. Once single sign-on is on, users can no longer log in with their Upsales password. If Entra ID is down or set up incorrectly, an administrator can open this URL and log in with their Upsales email and password.
23. Click the Use Single sign-on toggle to activate single sign-on: