SAML configuration for Azure AD

Follow these steps to configure Single Sign-On (SSO) to Canva via Azure AD:

1. From your Azure AD admin account, create a new Non-gallery application.
2. Enable SAML for the new application.
3. Enter SAML configuration:
   Identifier (entity id): https://www.canva.com
   Reply URL (ACS URL): https://www.canva.com/login/saml
4. Use the view step-by-step instructions link to retrieve the following:
   – SAML single sign-on service URL
   – SAML Entity ID
   – SAML Signing Certificate – Base64 encoded
5. Add a display name (Canva), and upload the app’s logo.
6. Copy the following values from Azure AD to the text fields in the SAML Authentication section on your team’s Account settings:
   – SAML single sign-on service URL → SAML 2.0 Endpoint (HTTP)
   – SAML Entity ID → Identity Provider Issuer
   – SAML Signing Certificate – Base64 encoded → Public Certificate