Skip to main content

How can we help you?

Search

SAML SSO - Microsoft Entra ID (Azure AD) Configuration

Set up single sign-on (SSO) for ContactMonkey using Microsoft Entra ID as your SAML 2.0 identity provider. ContactMonkey supports both Service Provider (SP) and Identity Provider (IdP) initiated SAML 2.0.

Before You Begin

Contact ContactMonkey Technical Support first. You'll need two pieces of information from our team before you can complete this setup:

  • Application Callback URL - The URL where Entra sends authentication responses
  • SP Entity ID - Your unique ContactMonkey organization identifier

What you'll need:

  • Admin access to your Entra admin dashboard
  • The Application Callback URL from ContactMonkey support
  • The SP Entity ID from ContactMonkey support

Please also review this article for requirements and frequently asked questions.

Configure Entra ID for ContactMonkey

Step 1: Create the SAML Application in Entra ID

  1. Log in to the Microsoft Entra admin center
  2. Navigate to the Microsoft Entra gallery
  3. Search for "SAML toolkit"
  4. Click Microsoft Entra SAML Toolkit
  5. Name your application (example: "ContactMonkey SAML")
  6. Click Create

Step 2: Configure Single Sign-On

  1. In your new application, click Set up single sign on
  2. Select SAML as the single sign-on method
  3. Click Edit in the Basic SAML Configuration section

Step 3: Enter ContactMonkey SAML Settings

Enter the following values exactly as provided by ContactMonkey Support:

  1. Identifier (Entity ID): Paste your ContactMonkey SP Entity ID
  2. Reply URL (Assertion Consumer Service URL): Paste your ContactMonkey Application Callback URL
  3. Sign on URL: Enter https://contactmonkey.com/users/sign_in/sso?layout=desktop
6

Regional domains: If your ContactMonkey account uses a regional domain (not contactmonkey.com), replace "contactmonkey.com" in the Sign on URL with your region's domain.

4. Click Save

Step 4: Configure User Attributes

User attributes map information from Entra ID to ContactMonkey. You need to edit three default claims:

  1. Return to the Single sign-on page
  2. Click Edit in the Attributes & Claims section
  3. Edit each claim below:

Email Address Claim:

  1. Click http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress
  2. Change Name to email
  3. Delete the Namespace value (leave blank)
  4. Click Save

First Name Claim:

  1. Click http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname
  2. Change Name to first_name
  3. Delete the Namespace value (leave blank)
  4. Click Save

Last Name Claim:

  1. Click http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname
  2. Change Name to last_name
  3. Delete the Namespace value (leave blank)
  4. Click Save
2024-09-05_00-53.png

Step 5: Download and Share Metadata

  1. Return to the Single sign-on page
  2. Scroll to the SAML Certificates section
  3. Click Download next to Federation Metadata XML
  4. Send this file to ContactMonkey Technical Support through your open support ticket

Once our team receives your metadata file, they'll complete the configuration on the ContactMonkey side and confirm when SSO is active.

Step 6: Assign Users

Control which users can access ContactMonkey with SSO:

  1. Go to the Users and Groups page in your application
  2. Click Add user/group
  3. Select the users or groups who should have ContactMonkey access
  4. Click Assign

Important: Only assigned users can log in to ContactMonkey using SSO. Users not assigned to this application cannot use SSO authentication.

See Also