Set up SAML SSO authentication

SAML SSO Setup with Outdoo AI

We support you in using any SAML SSO provider for your team to log in to Outdoo AI.

This guide covers the information you need to set up SAML SSO in Outdoo AI for non-specific providers. This article also includes details you may need to share with your provider. Contact your account manager for any further questions.

Prerequisites

We’ll need the following information from you:

• Identity Provider Metadata URL or Identity Provider Metadata XML file
  • The URL must be publicly accessible and generate a valid SAML Metadata response.
  • The XML response or Metadata file must include two SSO bindings with valid URLs:
    • HTTP-POST
    • HTTP-REDIRECT

Logout Redirect URL

The URL where you want users to be redirected after logging out of Outdoo AI.

SAML Name Identifier

In your provider, set the SAML name identifier property to emailAddress.

Signed Authentication Request

Ensure that Signed Authentication Request is turned off in your provider.

Information Your Provider May Request

Your provider may ask for some of the following:

You will find these on your Authentication Settings Page.

• Outdoo AI Entity ID:
  https://app.outdoo.ai
  (use this exactly as written, not your custom domain)
• Outdoo AI ACS URL:
  https://api.outdoo.ai/auth/sso/saml/login/<base64_id_from_sso_page>
• X509 Certificate:
  Outdoo AI does not provide this certificate. Your provider should generate one if required.

Microsoft Entra ID SAML SSO Setup

1. To configure authentication using Microsoft Entra ID:
2. Log in to Microsoft Entra ID with admin credentials and select Enterprise applications.
3. Click +New application > Create your own application.
4. Name the application, for example Outdoo AI SSO, keep the defaults, and click Create.
5. Inside the app, select Set up single sign-on.
6. Choose SAML as the method.
7. In Basic SAML Configurations, enter:
   • Identifier (Entity ID): https://app.outdoo.ai
   • Reply URL (ACS): https://api.outdoo.ai/auth/sso/saml/login/<base64_id_from_sso_page>
8. Click Save.
9. In Attributes & Claims:
   • Set Name identifier format to Email address.
   • Source: Attribute
   • Source attribute: user.mail
10. Delete any additional claims.
11. (Optional) If you plan to provision users via Microsoft Entra ID, ensure that permissions are configured according to the Microsoft Entra ID provisioning setup.
12. In Users and Groups, assign users/groups who should log in via SSO.
13. In Single Sign-On, copy the App Federation Metadata URL.

Final Step in Outdoo AI

• In Outdoo AI, go to Company Settings > Authentication—contact support to enable this.
• In the Identity provider metadata URL, paste the App Federation Metadata URL from Microsoft Entra ID.
• Click Update.
• Log out and test login via Entra ID to confirm the SSO authentication.