Azure AD SAML configuration

Setting up Single Sign-On (SSO) for your Enterprise team requires details from your SSO’s SAML configuration. Help from your IT team/department might be needed for this.

Here’s how get them:

1. From your Azure AD admin account, create a new Non-gallery application.
2. Enable SAML for the new application.
3. Enter SAML configuration:
   – Identifier (entity id): https://www.canva.com
   – Reply URL (ACS URL): https://www.canva.com/login/saml
4. Use the view step-by-step instructions link to retrieve the following:
   – SAML single sign-on service URL
   – SAML Entity ID
   – SAML Signing Certificate – Base64 encoded
5. Add a display name (Canva), and upload the app’s logo.
6. Note the following details for step 4 in setting up SSO for your Enterprise team:
   – SAML single sign-on service URL → SAML 2.0 Endpoint (HTTP)
   – SAML Entity ID → Identity Provider Issuer
   – SAML Signing Certificate – Base64 encoded → Public Certificate