SAML Configuration

Setup SAML with Microsoft Entra ID (Azure AD)

Login to your Microsoft Azure portal and search for “Entra ID” in the search bar and click “Microsoft Entra ID” from the search results.
Click on “Enterprise applications” from the left side menu.
Click “New Application” and select “Create your own application”
Enter the name of your application and click “Create”
In the new app, click on “Single sign-on” from the left side menu and select “SAML”
Click on “Edit” and enter the following values:
- Identifier (Entity ID): https://zenzap.co
- Reply URL (Assertion Consumer Service URL): https://prod-api.zenzap.co/sso/saml/callback\
Click “Save”
Click on “User Attributes & Claims” from the left side menu and click “Add new claim”
- displayName - recommended to be the user first name + last name
- email - recommended to be the user email
- id - user.objectid
Download the certificate (base64) and save it.
Configure SAML in Zenzap:

Go to your Zenzap account and navigate to Admin → Organization
Under “Single sign on (SSO)”, select SAML
Enter the following values from your Azure AD SAML configuration page:
- SAML SSO URL: Format https://login.microsoftonline.com/xxxxxx/saml2
- Identity Provider Issuer: Format https://sts.windows.net/xxxx
Upload the certificate you downloaded in step 9
Enter Service Provider Entity ID as https://zenzap.co
Click “Save”

Configure user roles to control access levels within Zenzap.

Login to your Okta Admin Console and go to Applications → Applications.
Click “Create App Integration” and select “SAML 2.0”, then click Next.
Enter a name for your application (e.g., “Zenzap”) and click Next.
Configure the SAML settings:
- Single sign-on URL: https://prod-api.zenzap.co/sso/saml/callback
- Audience URI (SP Entity ID): https://zenzap.co
- Name ID format: EmailAddress
- Application username: Email
Add attribute statements:
- displayName → user.profile.firstName + " " + user.profile.lastName
- email → user.profile.email
- id → user.profile.login
Click Next and Finish to create the application.
Go to the “Sign On” tab and copy the following values:
- Sign on URL (SAML SSO URL)
- Issuer (Identity Provider Issuer)
- Download the Signing Certificate
Configure SAML in Zenzap:
- Go to your Zenzap account and navigate to Admin → Organization
- Under “Single sign on (SSO)”, select SAML
- Enter the values from Okta:
  - SAML SSO URL: The Sign on URL from step 7
  - Identity Provider Issuer: The Issuer from step 7
- Upload the certificate you downloaded
- Enter Service Provider Entity ID as https://zenzap.co
- Click “Save”