Setting up Microsoft Entra ID (formerly Microsoft Azure) SSO for signing in to Cloudinary

Sign in with SSO is a feature available for customers on Enterprise / Custom Plans.

In order to set up your account with Azure SSO, please follow the following steps -

1. Setup in Entra ID

2. Setup in Cloudinary

Setup in Entra ID

Detailed instructions can be found at - https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/add-application-portal-setup-sso

1. Log in to Entra ID Portal - https://entra.microsoft.com . Go to Microsoft Entra ID.
2. Click on Users. Ensure the user registered in Cloudinary exists there with the same email
3. Goto Identity -> Applications -> Enterprise applications -> All Applications
4. Click + New Application to add Cloudinary as an application (ensure you are subscribed to a premium plan)
5. Click Create your own application 
   
6. You can provide Cloudinary as the application name
7. Once you click add, it will take you to the Application Screen
8. From the application screen, select 'Single sign-on' menu. Fill out the details of the Cloudinary application.
   • Identifier (Entity ID): https://cloudinary.com/saml
   • Reply URL (Assertion Consumer Service URL): https://cloudinary.com/saml/consume
   • Relay State: Add both https://cloudinary.com/saml/consume and https://console.cloudinary.com/saml/consume
   • Additional fields are shown below:
     
     
9. Assign user to the Cloudinary application. Reference doc - https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/add-application-portal-assign-users
10. Download the Federation Metadata XML

Setup in Cloudinary

1. Login to your Cloudinary account with a Master Admin user and navigate to the Users Tab of your Settings area
2. Set Metadata retrieval method to Inline, instead of the default URL option.
3. Open the Federation Metadata XML (downloaded on step 9 above) in a text editor. Copy and paste it into the SAML Metadata text box
4. Save your changes

You should now be able to log into Cloudinary from Azure. You can verify this by clicking Test on the 'Single sign-on' setup screen shown on step 8 above.