---
title: "Configure Azure AD SSO"
slug: "how-to-configure-sso-in-azure-ad"
updated: 2026-09-15T14:12:10Z
published: 2026-09-15T14:12:10Z
canonical: "docs.revealdata.com/how-to-configure-sso-in-azure-ad"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.revealdata.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Configure Azure AD SSO

Single Sign-On (SSO) allows users to access multiple applications with a single set of credentials, improving security and simplifying login management. This guide walks you through configuring SSO in Azure AD, including setup steps for both U.S. and EU Logikcull instances.

## Step 01: Access Azure Portal

Go to [**https://portal.azure.com.**](https://portal.azure.com.) From the Azure Services dashboard, select **Azure Active Directory**.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-35HX0K8F.png)

On the left panel, click **Enterprise Applications**.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-0T6S0S2K.png)

Click **+ New Application**.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-5C7KL73E.png)

## Step 02: Create a Custom Application

Select **Click here to try out the new and improved app gallery** (if prompted).

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-S0DWM219.png)

Click **Create your own application**.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-XN5L1W2O.png)

Enter **Logikcull** in the application name field. Select **Integrate any other application you don't find in the gallery**.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-3Z4B866K.png)

At the bottom click **Create**. And you will be redirected to the application.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-0N30NZLW.png)

## Step 03: Assign Test User

Under **Getting Started**, click **Assign users and groups** and add a test user to the app. (This will allow you to test SSO before enabling it for all users.)

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-JYM4MFUG.png)

## Step 04: Configure SAML

In the left menu under **Manage**, select **Single sign-on**.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-QRHJ2SI5.png)

Select **SAML** as the sign-on method.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-MMGZ0HIS.png)

## Step 05: Edit Basic SAML Configuration

Enter your URLs and entity IDs while replacing **[CONNECTION ID]** with your ID provided by the Logikcull team. For example, a U.S. instance with the ID **12345** would have a URL of https://login.logikcull.com/login/callback?connection=12345.

1. Under **Section 1: Basic SAML Configuration**, click the **pencil icon** to edit.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-1R2QE2EE.png)

1. Under **Entity ID** enter…
  1. For U.S. instances: `urn:auth0:logikcull:[Connection ID]`
  2. For EU instances: `urn:auth0:logikcull-prod-eu-central-1:[Connection ID]`
2. Under **Reply URL (ACS URL)** enter…
  1. For U.S. instances: `https://login.logikcull.com/login/callback?connection=[Connection ID]`
  2. For EU instances: `https://eu-central-1.logikcull.com/login/callback?connection=[Connection ID]`

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-5I18TA1Y.png)

1. At the top left of the form, click **Save** then click the **X** in the top right corner to exit Section 1.
2. This message may pop up - click **No, I’ll test later** or simply **ignore the message** and scroll down to **section 2.**

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-0BRAKB4G.png)

## Step 06: Edit User Attributes & Claims

Under **Section 2: Attributes & Claims**, click the **pencil icon** to edit**.**

![User attributes and claims section displaying given and family name fields.](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-3SD8MJ1U(2).png)

Under **Required Claim**, click **Unique User Identifier (Name ID)**.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-5NFT3SK1.png)

Under **Choose Name Identifier Format** select **Unspecified** in the dropdown. In **Source** **Attribute** select **user.mail**

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-19YTGEO1.png)

Map the remaining attributes as shown below. And then click **Save**.

| **User Attributes & Claims** | **Unique User Identifier** |
| --- | --- |
| given_name | user.given_name |
| family_name | user.family_name |
| name | user.userprincipalname |
| email | user.mail |

## Step 07: Download Certificate & Retrieve URLs

Under **Section 3: SAML Signing Certificate**, click **Download** next to **Certificate (Base64)**.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-H34E0HOA.png)

Scroll to **Section 4: Set up <Application Name>**. Click Copy the **Login URL** and the **Logout URL**.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-6P2KVSF4.png)

## Step 08: Complete Setup in Logikcull

You will need the following values to complete SSO setup inside Logikcull (**Preferences → Security → SSO Settings**):

- **Certificate (Base64)** file
- **Login URL (SAML Endpoint)**
- **Logout URL**

## Important Notes

> [!NOTE]
> **Note**
> 
> Domain user - a domain user is a user with a username/email that is managed through your company domain. e.g. if your company “Example” uses the email domain “example.com”, then “jane.doe@example.com” would be a domain user.

1. New domain users must be assigned to the Logikcull app in Azure AD and added to your Logikcull account in the Logikcull (https://app.logikcull.com)
2. All domain users will be required to login through SSO and therefore must be authorized Logikcull users in your IdP.
3. If you invite users to your Logikcull account that are not domain users, such as external counsel, they will log into Logikcull directly using a username and password.
4. If you have enforced 2FA on your Logikcull account, which is recommended, all users will be required to enter a second factor regardless of login method.