How do I configure Microsoft Entra ID SSO for Assembled?

Assembled supports signing in with Microsoft Entra ID (formerly Azure AD) using SAML single sign-on (SSO). This article walks through registering Assembled as an enterprise application in Entra, sharing your SAML details with our support team, and testing the connection before you roll it out to your organization.

If your team uses Okta instead, see How to configure Okta for Assembled. For general background on how SAML SSO works with Assembled, see How to configure SAML SSO for Assembled. If you also want to automate user provisioning, see SCIM User Provisioning.

What do I need before I start?

Setting up Entra SSO is a joint process between your Entra administrator and the Assembled support team. Before you start, contact support@assembled.com to let us know you're setting up Microsoft Entra SSO. We'll provide the Assertion Consumer Service (ACS) URL and Entity ID that are unique to your Assembled account, which you'll need in Entra.

How do I register Assembled as an enterprise application in Microsoft Entra?

1. Sign in to the Microsoft Entra admin center with an account that has Global Administrator or Application Administrator access.
2. Navigate to Identity > Applications > Enterprise applications.
3. Select + New application.
4. Select Create your own application.
5. Enter a name, such as Assembled, and select Integrate any other application you don't find in the gallery (Non-gallery).
6. Select Create.

This creates the application object you'll use to configure single sign-on and assign users in the following steps.

How do I configure single sign-on for the application?

1. From your new application, select Single sign-on in the left navigation.
2. Select SAML as the single sign-on method.
3. In the Basic SAML Configuration section, select Edit.
4. Enter the Entity ID Assembled provided you in the Identifier (Entity ID) field.
5. Enter the ACS URL Assembled provided you in the Reply URL (Assertion Consumer Service URL) field.
6. Select Save.

How do I assign users or groups to the Assembled application?

Users and groups need to be assigned to the enterprise application in Entra before they can sign in to Assembled through SSO.

1. From your application, select Users and groups in the left navigation.
2. Select + Add user/group.
3. Choose the users or groups who should have access to Assembled, then select Assign.

How do I share my SAML metadata with Assembled and test the connection?

1. From your application's Single sign-on page, find the SAML Certificates section.
2. Download the Federation Metadata XML file.
3. Send this file to support@assembled.com.

Once we receive your metadata file, we'll configure the connection on our end and let you know when it's ready to test. To test, sign in to Assembled with a test account before rolling SSO out to your whole team. This can take a few business days depending on our support queue.

How do I enforce SSO for my entire organization?

Once your connection is tested and working, you can choose to require SSO for all sign-ins. Let support@assembled.com know if you'd like to enable this.