Integrating Clari with Microsoft Azure SSO

Overview

Clari supports single sign-on (SSO) using SAML 2.0 compliant third-party providers such as Microsoft Azure. This document specifies the steps needed to enable Microsoft Azure SSO for your enterprise. 

Your company's Microsoft Azure admin should follow the steps below.

Prerequisite

First, as a prerequisite step, send a support ticket to request your company's Entity ID and Assertion Consumer Service (ACS URL) to enable Azure SSO.  Once you have these details, proceed with these instructions.

How to Configure Custom SAML App in Microsoft Azure

1. Log into your Azure portal, and select Enterprise Application then select New Application

2. From here, select Non-gallery application, and enter app name: Clari New

3. Once the Non-gallery application has been created, navigate to Single-Sign On

4. From the Basic SAML Configuration section, please complete the following:

   1. Add Identifier (Entity ID) provided in Clari’s kickoff email, which is labeled Audience URI

   2. Add Reply URL (Assertion Consumer Service URL): https://login.clari.com/sso/saml2

   3. Create a custom attribute for “Email”, which should be mapped to the field associated with your user’s login email. By default, this field is user.mail

5. Add the Clari logo to your SAML app (download the logo here).

Once this is complete, please provide the SAML App metadata URL to the Clari team in the support ticket you created in the prerequisite ticket above.