Skip to main content
Zenskar supports single sign-on (SSO) through SAML 2.0, letting an organization authenticate users through its existing identity provider. This guide sets up SAML in Zenskar using Microsoft Entra ID as the identity provider.
  1. Click the account menu at the bottom of the sidebar, and select Settings.
  2. Open the SAML tab.
  3. In the Connection section, enter a Name for this configuration and the Domain to verify, for example acme.com.
  4. Click GET TXT RECORDS.
  5. Add the resulting TXT record to the domain’s DNS.
  6. Click VERIFY DOMAIN once the record has propagated. The domain’s status changes from Pending to Verified.
  7. Under Identity Provider, select Microsoft Entra ID from the dropdown.
  1. Log in to the Azure portal.
  2. Go to Microsoft Entra ID > Applications > Enterprise Applications > + New Application.
  3. Select Create your own application.
  4. Name the application, for example “Zenskar SSO”, and choose Integrate any other application you don’t find in the gallery (non-gallery application).
  5. After the app is created, go to Single Sign-On, and choose SAML.
  6. Copy the following values from the Azure portal into Zenskar’s Identity Provider Configuration section:
Open the downloaded certificate file in a text editor, and copy the certificate including the BEGIN CERTIFICATE header and the END CERTIFICATE footer.
  1. Assign the users or groups who should have access.
In Zenskar’s Attribute Mapping section, map each Zenskar field to the Microsoft Entra claim that carries it:These are Microsoft’s default claim names. If the enterprise application’s claims have been customized, use the actual claim names configured under Microsoft Entra ID > Enterprise applications > [Your App] > Single sign-on > User Attributes & Claims instead.
  1. Copy the following values from Zenskar’s Zenskar SAML Configuration Values section into the Azure portal:
  1. Save the configuration in the Azure portal.
  2. Back in Zenskar, turn on SAML Status, and click Save Configuration.
  1. Confirm the user exists in both Microsoft Entra ID and Zenskar, with a matching email address.
  2. Sign out, and go to the Zenskar sign-in screen.
  3. Sign in using the account’s email address. With a verified domain and an enabled configuration, the sign-in should route through Microsoft Entra ID.
  4. On success, the sign-in returns to the Zenskar dashboard.
Reach out to help@zenskar.com with questions while going through setup.