> ## Knowledge Base Index > Fetch the complete knowledge base index at: https://help.chrisp.chat/sitemap.xml > Use this file to discover available pages before exploring further. > Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash). # Set up Azure <> Spendesk SAML SSO # Azure AD (Active Directory) **Please reach out to your Customer success manager to enable this feature !** Spendesk is not listed as a gallery application in Azure AD. Follow the instructions below to set up Azure AD with Spendesk. 1. Open the Azure portal and sign in as an Azure admin or co-admin. 2. Navigate to **Azure Active Directory > Enterprise Applications.** [![](https://storage.crisp.chat/users/helpdesk/website/-/c/4/2/0/c420c983399a3000/80e3a5a3-e7a2-48ce-828a-d75d54_1luzo8h.png)](https://spendesk-0eff75f1d549.intercom-attachments-7.com/i/o/493974325/ed368d1f7a7be26122288c66/iUUiSqyiYWDJKyfKXgRJr7Fv_EdQVw1q78q_VoEjUzo2f1k-_hSWIbFy3vK5isX8PwlmyPGDzJk7I2msAjMnU4qrLTbGoCr7wUUcM4u18sG8rf1gir3i-VxC_QlRi3vnugjEMsIN?expires=1777572900&signature=ec91a1e01b6ab60c9cae57e54a1962b9945bd4c2ba9dbb81caf2294cd0215f7e&req=cCkkH856noNaFb4f3HP0gB7n3luGvuE7duAXcyaqc0hx8DcnlQ%2B3FEORVQDC%0AwtRhBFtLb5caSwM7bw%3D%3D%0A) 3. Initiate the setup of a new app: [![](https://storage.crisp.chat/users/helpdesk/website/-/b/a/3/8/ba38c22baed72800/8a7d6d7d-450c-415c-8a9d-ef1684_1rgbpdl.png)](https://spendesk-0eff75f1d549.intercom-attachments-7.com/i/o/493974337/6a8ad2b670f71d8a88d9ab03/0ph0paZYGHC3zftkXhP4RqVzNbMxlnyMLp5JrndVEyaHyYCCB2-JDSCp1SIl18bch0POj_xRzl6TrxknnpvIaVL1OQvrhc9mYIJ9T6sHLJ7C2-Az-moDNp4MO3UA5IJWiG61Mxyk?expires=1777572900&signature=09acd0b6e4aecc3644cdf41909646866bd5c645f6c277fb47d9ac492a395c595&req=cCkkH856noJYFb4f3HP0gAoa%2Fx1eJxxQCW2940Kqpec1PoHbgTOr8z0rkYLE%0AL3NwOew43eYgB3c3Xg%3D%3D%0A) 4. Click on "**adding a non-gallery application**" / "**create your own application**" [![](https://storage.crisp.chat/users/helpdesk/website/-/1/c/7/c/1c7c54d80cbd5800/f642fee3-b914-43df-881f-0075de_1q0ve3l.png)](https://spendesk-0eff75f1d549.intercom-attachments-7.com/i/o/493974343/4e8ab3160136fc36b0842508/yqSfaHVgRzay-ElaTMMpfSRPzNbysj-h6FeBaSytyHLh9cf0iMW5yViEnPgOX5UpUZ07Va3YSFnSzzsc53d-AX0Ns129yGKuxqlx19AZjnJwBmUYV0BbmcicUAL5vj3AitPMokt5?expires=1777572900&signature=177d4e09fa81819fdea33278f4cdd031113fb638413bd0fafdd4d7111424fd70&req=cCkkH856noVcFb4f3HP0gFbo5T2tC01CdJt8CX4JCiZ6sg3iAYJ60R4IrcmK%0AEH6gxRHKJYIWwarevQ%3D%3D%0A) When creating an Enterprise Application, Azure automatically assigns an owner role to the person creating the application for their organisation. This role can be transferred within their organisation. **Owner role is needed to be able to manage the application within Azure.** 5. Give it a name like "Spendesk" and click on "**Create**". [![](https://storage.crisp.chat/users/helpdesk/website/-/8/3/9/e/839e914b42833000/ff5a6af9-fd0b-4643-a86e-42b383_1k7amgf.png)](https://spendesk-0eff75f1d549.intercom-attachments-7.com/i/o/493974353/ed1effd60ea0c417f32f503c/OGMs-wk8eLlQBEGN_mhjkal4LuiHzOS6tdjO3wF0nGYHgkFctAC_eOa6-cN8Nl3c9D7fXZGUe95_TDg4ZKH00IPv0UZPLH0FvjBK2M6hg83tjggPDGm1eP9nSstVxw2lA7-v_u1K?expires=1777572900&signature=6d2059a3e44a324fc0bbe8909f185d6717cffe3f5725bd37f61aebe2e51e6139&req=cCkkH856noRcFb4f3HP0gEfR8dlMPUXCyHv3xF0V7kWRi8Tmy6BQUYus7icz%0AUp%2BX4K1JI3U0whIipQ%3D%3D%0A) 6. Afterwards you'll be able to set it up by navigating to "**Single sign-on**" and selecting **"SAML**". Setup the connection by clicking on the "**Edit**" button. [![](https://storage.crisp.chat/users/helpdesk/website/-/e/7/5/9/e7592976337b8000/132359f5-10f2-4fc4-bbb5-ee4ac9_6g6ldm.png)](https://spendesk-0eff75f1d549.intercom-attachments-7.com/i/o/493974363/79b3e46047a7833511aa6852/m9DKUlTrjHUK7G_MONlFVJSRjk5WZpNMBbyEor0cjDW_F3_BnSxSdqykUjshllRUKex4P7Gx5Gy54G-9jFvspGBLZvTWiTRZ-08QxEGk2YSuSEzMneDes1CgUF1kWLmOHS12nbpV?expires=1777572900&signature=f2ddce17b5d8faec25eb98b0d56354f8c0ff4d8bb00155fb8f0374b75beb3c44&req=cCkkH856nodcFb4f3HP0gBfaJDHpU%2By03pRHiWofKJ68n7%2Fl4gGpg0GW0ZcD%0AUGXPkNZmGOxCCX8RQA%3D%3D%0A) 7. Add the url we provided, in both **"Identifier**" and **"Reply URL**" fields: [![](https://storage.crisp.chat/users/helpdesk/website/-/1/b/e/9/1be978136895fb00/0c34ff9e-eb47-4f07-ab47-d75112_3kn783.png)](https://downloads.intercomcdn.com/i/o/957026436/0b4e0426f70c7cace7a26f77/saml-config.png?expires=1777572900&signature=d9c49c9de2c194a35fadea4fba70a98d3d17efb00f9abbd9e8511f5c8f878a56&req=fSUgFst4mYJZFb4f3HP0gJAfYKX2ftOd1vx%2FKL3c8B1fMMCDrL2Jx4vbMO%2F5%0AamJ3eRxizbhD9iihTQ%3D%3D%0A) 8. In addition, you will need to set the "**Unique User Identifier**" from the section "**User Attributes and Claim**s" to "**user.mail**". [![](https://storage.crisp.chat/users/helpdesk/website/-/a/f/4/6/af46cbc6225ae000/c2dadee5-1acc-4a7f-aca7-a62aad_1y9jajn.png)](https://spendesk-0eff75f1d549.intercom-attachments-7.com/i/o/493974385/cafbe5125d994fe0ca457c65/NqxuGYwMPUSwcU0vlq18thpPbhTfo5GDBoUgfP-WKlzgoBk_bdyhjVepXt7TRL3SckXQU5509oCyWYmF00_MOBOD0Z5x4p9YqqzcCDIZdOWO_H1Bn5Wad6LbbJdiCQkSdF8cDa56?expires=1777572900&signature=7db6595c8acf3409147f82b26a31ba6146397fb66f1249b0a17c9e5308b666ba&req=cCkkH856nolaFb4f3HP0gGkiUtDjDlYNgqpno3PBA3gDIbASnsp7nrtMAAIl%0AAe%2BH4dA59%2BujzEL9FA%3D%3D%0A) Please also make sure all the other fields are correctly filled. In order to work as expected, Spendesk SAML SSO needs the following claims: * user.mail * user.givenname * user.surname Along with the NameID [![](https://spendesk-0eff75f1d549.intercom-attachments-7.com/i/o/493974394/5f13ed01e3ffe49f335a98b3/gcHmbG6G2VCIsvk5tfo9vO6utgMgSC0EHaht3zDotu78WzTJjl13sYFnxnb2k9X5kxChl7_Km8DPUTjWCBJB1OUWkC0RueHG8qUf3LPglnIhOBrFRpGGyB9Gabj-VoJ_fAXw72eg?expires=1777572900&signature=35cc11aa85fa5f6794e8795318fcce7e5328d3c02fbd94b609969198feb80444&req=cCkkH856nohbFb4f3HP0gBKZZBfelYIjbRfqudD7dVDhF1imjkFHnEbU9mNA%0ALm4cb6k8WC4%2BrZPwXA%3D%3D%0A)](https://spendesk-0eff75f1d549.intercom-attachments-7.com/i/o/493974394/5f13ed01e3ffe49f335a98b3/gcHmbG6G2VCIsvk5tfo9vO6utgMgSC0EHaht3zDotu78WzTJjl13sYFnxnb2k9X5kxChl7_Km8DPUTjWCBJB1OUWkC0RueHG8qUf3LPglnIhOBrFRpGGyB9Gabj-VoJ_fAXw72eg?expires=1777572900&signature=35cc11aa85fa5f6794e8795318fcce7e5328d3c02fbd94b609969198feb80444&req=cCkkH856nohbFb4f3HP0gBKZZBfelYIjbRfqudD7dVDhF1imjkFHnEbU9mNA%0ALm4cb6k8WC4%2BrZPwXA%3D%3D%0A) Note: please make sure that each user account should have an email address, a first name, and a last name set up under your identity provider to be able to log in. 9. Once done, add your users into the Spendesk app: [![](https://spendesk-0eff75f1d549.intercom-attachments-7.com/i/o/493974405/1ac0927c8028546303778fd8/X4dJGjXkhjOPnuPmdk_337-8bH5C-uheUVEfK5cZa2VUI407xI3leccf-HRAaX5-jgWdDfXsrlZ5uHbJUjhL1znV1rcEVAm_BfCplDHR9NVBq17ky8f6ZC8H4zoVJItvhfH188Xz?expires=1777572900&signature=289ed7e86fa3685fd9a562173c03661a1e2c75611bae4e8cfe08f692695a2560&req=cCkkH856mYFaFb4f3HP0gBU6ZRwAyqTvKSjXPKxNkihDPwF%2Fg4wA2vh3i8Qy%0ASRnX007eGPB4K8SS4Q%3D%3D%0A)](https://spendesk-0eff75f1d549.intercom-attachments-7.com/i/o/493974405/1ac0927c8028546303778fd8/X4dJGjXkhjOPnuPmdk_337-8bH5C-uheUVEfK5cZa2VUI407xI3leccf-HRAaX5-jgWdDfXsrlZ5uHbJUjhL1znV1rcEVAm_BfCplDHR9NVBq17ky8f6ZC8H4zoVJItvhfH188Xz?expires=1777572900&signature=289ed7e86fa3685fd9a562173c03661a1e2c75611bae4e8cfe08f692695a2560&req=cCkkH856mYFaFb4f3HP0gBU6ZRwAyqTvKSjXPKxNkihDPwF%2Fg4wA2vh3i8Qy%0ASRnX007eGPB4K8SS4Q%3D%3D%0A) 10. After saving, you should land on the main screen. From it, you can download the config file you’ll need to forward with us under "**SAML Signing Certificate**" > "**Federation Metadata XML**". [![](https://spendesk-0eff75f1d549.intercom-attachments-7.com/i/o/493974415/f3883088eaa4b0ec06a1be94/2hrjDJWdJrluH4DJn6gMnu7x6rsnDV9lkt80hSwO7r6b5M99-e1FVSGBCsLNoHhg4RDZUNTq7MHaOMglqq2VnJAbwx_j_rdVqjw9oJEKPYv3TLbyS00lTYwQV0wiEU0-k9nfSxVz?expires=1777572900&signature=45d7af6369ebd1b84838707c45c0ffeda46798f2cfa5d0f6a549c6ec7d153bb5&req=cCkkH856mYBaFb4f3HP0gKseO8SfUv7TOK8kJAUEFnczI%2BrN7pVkfGnzP9sF%0A%2BEllVgqoLZ5%2BvvLE3w%3D%3D%0A)](https://spendesk-0eff75f1d549.intercom-attachments-7.com/i/o/493974415/f3883088eaa4b0ec06a1be94/2hrjDJWdJrluH4DJn6gMnu7x6rsnDV9lkt80hSwO7r6b5M99-e1FVSGBCsLNoHhg4RDZUNTq7MHaOMglqq2VnJAbwx_j_rdVqjw9oJEKPYv3TLbyS00lTYwQV0wiEU0-k9nfSxVz?expires=1777572900&signature=45d7af6369ebd1b84838707c45c0ffeda46798f2cfa5d0f6a549c6ec7d153bb5&req=cCkkH856mYBaFb4f3HP0gKseO8SfUv7TOK8kJAUEFnczI%2BrN7pVkfGnzP9sF%0A%2BEllVgqoLZ5%2BvvLE3w%3D%3D%0A) Validate and you're all set!