SAML configuration for Azure AD
Follow these steps to configure Single Sign-On (SSO) to Canva via Azure AD:
- From your Azure AD admin account, create a new Non-gallery application.
- Enable SAML for the new application.
- Enter SAML configuration:
Identifier (entity id): https://www.canva.com
Reply URL (ACS URL): https://www.canva.com/login/saml - Use the view step-by-step instructions link to retrieve the following:
– SAML single sign-on service URL
– SAML Entity ID
– SAML Signing Certificate – Base64 encoded - Add a display name (Canva), and upload the app’s logo.
- Copy the following values from Azure AD to the text fields in the SAML Authentication section on your team’s Account settings:
– SAML single sign-on service URL → SAML 2.0 Endpoint (HTTP)
– SAML Entity ID → Identity Provider Issuer
– SAML Signing Certificate – Base64 encoded → Public Certificate