Login, SAML & SCIM Configuration

​

SAML

1. Login to your Microsoft Azure portal and search for “Entra ID” in the search bar and click “Microsoft Entra ID” from the search results.
2. Click on “Enterprise applications” from the left side menu.
3. Click “New Application” and select “Create your own application”
4. Enter the name of your application and click “Create”
5. In the new app, click on “Single sign-on” from the left side menu and select “SAML”
6. Click on “Edit” and enter the following values:
   • Identifier (Entity ID): https://zenzap.co
   • Reply URL (Assertion Consumer Service URL): https://prod-api.zenzap.co/sso/saml/callback\
7. Click “Save”
8. Click on “User Attributes & Claims” from the left side menu and click “Add new claim”
   • displayName - recommended to be the user first name + last name
   • email - recommended to be the user email
   • id - user.objectid
9. Download the certificate (base64) and save it.
10. Configure SAML in Zenzap:

• Go to your Zenzap account and navigate to Admin → Organization
• Under “Single sign on (SSO)”, select SAML
• Enter the following values from your Azure AD SAML configuration page:
  • SAML SSO URL: Format https://login.microsoftonline.com/xxxxxx/saml2
  • Identity Provider Issuer: Format https://sts.windows.net/xxxx
• Upload the certificate you downloaded in step 9
• Enter Service Provider Entity ID as https://zenzap.co
• Click “Save”

​

User Groups (App Roles)

1. In Entra ID: Go to app registration → Application Name → App roles
2. Create new app roles. Zenzap supports 2 app role values: admin and user
3. Assign the app roles to the users/groups

​

SCIM

1. In your enterprise app, click Provision User Accounts
2. Use the url https://prod-api.zenzap.co/auth/scim/microsoft and the key provided by your CS representative.
3. Test Connection and verify the connection is successful.
4. Map the user attributes to the correct fields in Zenzap:

5. Set “Sync only assigned users and groups” and click Save

6. Press start provisioning. This process typically takes up to 40 minutes.
7. Check the provision overview for any errors.

8. Users will appear in the Zenzap admin screen under the Organization section.