Setting up Microsoft Azure SSO for signing in to Cloudinary

Sign in with SSO is a feature available for customers on Enterprise / Custom Plans.

In order to set up your account with Azure SSO, please follow the following steps -

1. Setup in Azure

2. Setup in Cloudinary

Setup in Azure

Detailed instructions can be found at - https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/configure-single-sign-on-portal

1. Log in to Azure Portal - https://portal.azure.com . Go to Azure Active Directory.
2. Click on Users. Ensure the user registered in Cloudinary exists there with the same email
3. Goto Azure Active Directory -> Enterprise Applications
4. Click + New Application to add Cloudinary as an application (ensure you are subscribed to a premium plan)
5. Under Add an application options, choose Non-gallery application
   
6. You can provide Cloudinary as the application name
7. Once you click add, it will take you to the Application Screen
8. From the application screen, select 'Single sign-on' menu. Fill out the details of the Cloudinary application.
   • Entity ID: https://cloudinary.com/saml
   • Assertion Consumer Service URL: https://cloudinary.com/saml/consume
   • Relay State: https://cloudinary.com/console
   • Additional fields as shown below:
     
     
9. Assign user to the Cloudinary application. Reference doc - https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/add-application-portal-assign-users
10. Download the Federation Metadata XML

Setup in Cloudinary

1. Login to your Cloudinary account with a Master Admin user and navigate to the Users Tab of your Settings area
2. Set Metadata retrieval method to Inline, instead of the default URL option.
3. Open the Federation Metadata XML (downloaded on step 9 above) in a text editor. Copy and paste it into the SAML Metadata text box
4. Save your changes

You should now be able to log into Cloudinary from Azure. You can verify this by clicking Test on the 'Single sign-on' setup screen shown on step 8 above.