This guide connects Backvera to Microsoft Entra ID (Azure AD) with SAML single sign-on. You need admin access to both your Backvera workspace and Microsoft Entra ID (Azure AD). Open the Backvera SSO wizard first (Settings > SSO) and keep it open – you will copy values between the two tabs. For the full Backvera side, see Set up SSO (SAML).
1. Create the SAML app in Microsoft Entra ID
- In the Microsoft Entra admin center, go to Enterprise applications > New application > Create your own application.
- Name it Backvera and choose “Integrate any other application you don’t find in the gallery (Non-gallery)”.
- Open the app, then Single sign-on > SAML.
2. Enter Backvera’s details in Entra ID
Under Basic SAML Configuration, click Edit and set:
- Identifier (Entity ID) = Backvera’s SP Entity ID.
- Reply URL (ACS URL) = Backvera’s ACS (Reply) URL.
- In Attributes & Claims, make sure the unique user identifier (Name ID) is the user’s email, and add a groups claim if you want group-to-role mapping.
3. Copy Entra ID’s details into Backvera
From the SAML setup page, get:
- IdP SSO URL = the Login URL under “Set up Backvera”.
- IdP Entity ID = the Microsoft Entra Identifier.
- X.509 certificate = download the Certificate (Base64) under SAML Certificates.
4. Map groups and enable
Back in the Backvera SSO wizard, paste the three values above. Then, in Group mappings, add a mapping for each group: type the IdP group name (an exact, case-sensitive match to your group claim) and pick the Backvera role to grant – Admin, Global view, or Project (admin or view per project). The roles are a pick-list, so there is nothing to guess. Save and enable, then assign the app to the right users or groups in Entra ID.
5. Sign in
Members sign in from the Sign in with SSO page by entering your workspace slug, then authenticate with your identity provider. A successful sign-in lands them in your workspace with the role you mapped. If sign-in is rejected, double-check the X.509 certificate, that Name ID is the user’s email, and that your group names match the mappings exactly.
Still need help? Email our team at [email protected].