If you are using Microsoft Entra ID (or Azure Active Directory) for Single Sign-On, then this page will walk you through how to set this up.

In order to set this up, an Administrator must navigate to Home → Settings → Security Controls. From here you will see the Login Settings section. In this section, update the dropdown for Single Sign-On (SSO) to SAML and fill in the appropriate details before clicking Save.

To get started with setting up SSO through Microsoft Entra ID we will need a few key pieces of information. You will need to add a new Enterprise Application within Microsoft Entra ID in order to get this information.

• Metadata URL
  • This is your identity provider's metadata URL. See Create an app registration in Azure section below for instructions on how to set this up for Microsoft Entra ID.

Once set up to sign in via SAML, your users will be able to sign in to Genius with their credentials from their company account. Please make sure the email for their user in Genius matches the email on their company account or the user may encounter errors when logging in.

Set up in Entra through the Microsoft Entra Gallery (easiest method)

Create an app registration in Azure

See Microsoft's article here

In order to set up Microsoft Entra ID to support SAML 2.0 you will need to go through a few steps in Microsoft Azure to get everything enabled.

1. Sign in to Microsoft Entra Admin Center
2. Navigate to Applications → Enterprise applications
3. Choose New application

4. Search for “Genius” or “AVOXI”
5. Select the Genius application

6. Click Create at the bottom of the right sidebar that pops out

7. Once Genius has been added to your applications, navigate to the Single sign-on screen
8. Choose SAML Single Sign-On method

9. In the Basic SAML Configuration option click on the ellipses and click Edit

10. Here you will need to fill out a couple of fields:
    1. Sign on URL - use https://genius.avoxi.com
11. Click Save once you've entered that value and you can close the right sidebar (Basic SAML Configuration)

12.  Back on the Set up Single Sign-On with SAML page look in box 3 - SAML Certificates - and copy the App Federation Metadata URL

13. Login to Genius and go to Home → Settings → Security Controls
14. Enable SSO and choose Microsoft Entra ID from the dropdown
15. Paste the App Federation Metadata URL in the Metadata URL field and click Save (will require you to enter your current Genius password)

16. SSO should now be configured, logout of Genius and log back in. Notice that after you enter your email there will be a new “Sign in with Entra ID” button that you can use to sign in through Entra ID SSO. 
    13. Note: If you want to auto-redirect your users to Entra ID you can turn off Account Login from the Security Controls screen. This will disable logging in through ANY genius accounts and only allow login through Entra ID so BE CAREFUL before enabling as this will erase all current Genius passwords.

17. [Optional] In Entra ID, navigate to the SAML Certificates section, click Edit, and in the Signing Option dropdown choose “Sign SAML response and assertion” for some additional security measures

Set up in Entra through registering a new application

Create an app registration in Azure

See Microsoft's article here

In order to set up Microsoft Entra ID to support SAML 2.0 you will need to go through a few steps in Microsoft Azure to get everything enabled.

1. Sign in to Microsoft Entra Admin Center
2. Navigate to Applications → Enterprise applications
3. Choose New application

4. Choose Create your own application 
5. Give the new application registration a name (may we suggest AVOXI Genius?)
6. Choose “Integrate any other application you don'pt find in the gallery (Non-gallery)” option - choosing any other option here may not allow you to set up SAML-based SSO properly.
7. Click Create at the bottom of the right sidebar once you've named the application and chosen an option

8. Go back to the Enterprise applications screen and click on the AVOXI Genius application you just created

9. After opening up your new Genius Enterprise application, go to the Single sign-on screen
10. In the Basic SAML Configuration option click on the ellipses and click Edit

11. Here you will need to fill out a couple of fields:
    1. Identifier (Entity ID) - use https://genius.avoxi.com
    2. Reply URL (Assertion Consumer Service URL) - use https://genius.avoxi.com/api/v1/auth/saml/consume
12. Click Save once you've entered those values and you can close the right sidebar (Basic SAML Configuration)

13.  Back on the Set up Single Sign-On with SAML page look in box 3 - SAML Certificates - and copy the App Federation Metadata URL

14. Login to Genius and go to Home → Settings → Security Controls
15. Enable SSO and choose Microsoft Entra ID from the dropdown
16. Paste the App Federation Metadata URL in the Metadata URL field and click Save (will require you to enter your current Genius password)

17. SSO should now be configured, logout of Genius and log back in. Notice that after you enter your email there will be a new “Sign in with Entra ID” button that you can use to sign in through Entra ID SSO. 
    13. Note: If you want to auto-redirect your users to Entra ID you can turn off Account Login from the Security Controls screen. This will disable logging in through ANY genius accounts and only allow login through Entra ID so BE CAREFUL before enabling as this will erase all current Genius passwords.

18. [Optional] In Entra ID, navigate to the SAML Certificates section, click Edit, and in the Signing Option dropdown choose “Sign SAML response and assertion” for some additional security measures