Set up SAML SSO Authentication

Outdoo AI supports any SAML SSO provider for your team's login. This guide covers what you need to set up SAML SSO in Outdoo AI for non-specific providers, and includes details you may need to share with your provider. Contact your account manager for any further questions.

The Additional Authentication Providers section, where SAML metadata and entity details are entered.

Prerequisites

You will need to provide the following:

• Identity Provider Metadata URL or Identity Provider Metadata File (XML)

• • The URL must be publicly accessible and return a valid SAML metadata response.

• • The XML response or metadata file must include two SSO bindings with valid URLs: HTTP-POST and HTTP-REDIRECT.

• After Sign Out, Redirect To: the URL where team members are redirected after signing out of Outdoo AI.

• SAML name identifier: in your provider, set the SAML name identifier property to emailAddress.

• Signed authentication request: make sure Signed Authentication Request is turned off in your provider.

Information your provider may request

Your provider may ask for some of the following. You will find these under Note on the Authentication page once you select SAML.

• Outdoo AI Entity ID: https://app.outdoo.ai. Use this exactly as written, not your custom domain.

• Outdoo AI Reply URL (ACS URL): https://api.outdoo.ai/auth/sso/saml/login/[base64_id_from_sso_page]. Copy the exact URL, including your ID, from the Authentication page.

• X.509 Certificate: Outdoo AI does not provide this certificate. Your provider should generate one if required.

Microsoft Entra ID SAML SSO Setup

• Log in to Microsoft Entra ID with admin credentials and select Enterprise applications.

• Click +New application > Create your own application.

• Name the application (for example, Outdoo AI SSO), keep the defaults, and click Create.

• Inside the app, select Set up single sign-on.

• Choose SAML as the method.

• In Basic SAML Configurations, enter:

• • Identifier (Entity ID): https://app.outdoo.ai

• • Reply URL (ACS): https://api.outdoo.ai/auth/sso/saml/login/[base64_id_from_sso_page]

• Click Save.

• In Attributes and Claims:

• • Set Name identifier format to Email address.

• • Source: Attribute

• • Source attribute: user.mail

• • Delete any additional claims.

• (Optional) If you plan to provision users via Microsoft Entra ID, make sure permissions are configured according to the Microsoft Entra ID provisioning setup.

• In Users and Groups, assign users or groups who should log in via SSO.

• In Single Sign-On, copy the App Federation Metadata URL.

Final Step in Outdoo AI

• In Outdoo AI, go to Company Settings > Authentication.

• In the Additional Authentication Providers section, select SAML from the provider dropdown.

• Under Metadata Source, choose Identity Provider Metadata URL and paste the App Federation Metadata URL from Microsoft Entra ID. (If your provider gives you a file instead, choose Identity Provider Metadata File (XML) and upload it.)

• In After Sign Out, Redirect To, enter the URL where team members should land after signing out.

• Click Save Changes.

• Sign out and test login via Entra ID to confirm the SSO authentication works.

This article covers SAML only. To turn Email and Password, Google, or Microsoft login on or off, or to change how long team members stay signed in, see the Authentication Setup Guide. For an overview of all login methods, see Authentication Methods in Outdoo AI.

Hope this article was helpful. For any queries, please write to support@outdoo.ai

Related articles

• Authentication Methods in Outdoo AI: overview of each login method and who it suits

• Authentication Setup Guide: step-by-step instructions for enabling login methods and session settings

• Add or Manage Team Members