Microsoft Entra SSO setup

Configure SAML 2.0 single sign-on for Revial through Microsoft Entra ID — about 10 minutes for an IT administrator.

This guide walks an IT administrator through creating and configuring a SAML 2.0 Enterprise Application in Microsoft Entra ID (Azure AD) to enable single sign-on for Revial. It takes about 10 minutes. At the end you send Revial one URL to complete the connection.

This page is public so you can send it straight to your IT administrator, who may not have a Revial account.

Step 1 — Create a new Enterprise Application

In the Azure portal, go to Microsoft Entra ID → Enterprise applications → New application. Click + New application to open the app gallery, then Create your own application. In the dialog:

Name the application Revial SSO
Select Integrate any other application you don't find in the gallery (Non-gallery)

Step 2 — Open single sign-on settings

Open the newly created Revial SSO application, click Single sign-on in the left-hand sidebar, then choose SAML as the method.

Step 3 — Upload the SAML metadata file

At the top of the SAML setup page, click Upload metadata file. Download the metadata XML from this URL and upload it:

https://xtjnpyprbitatabxobrg.supabase.co/auth/v1/sso/saml/metadata

After uploading, set the Sign-on URL to:

https://app.revial.ai/auth/sso

Then save the configuration.

Step 4 — Verify attributes and claims

In the Attributes & Claims section, locate the email address claim and verify it is configured as follows:


Claim name	`http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress`
Source attribute	`user.userprincipalname`

Do NOT use user.mail as the source attribute. It is frequently empty for cloud-only Microsoft 365 accounts. Always use user.userprincipalname so SSO works for all users.

Step 5 — Assign users or groups

Go to Users and groups in the left sidebar and assign all users or security groups that should have access to Revial via SSO.

Assign a security group rather than individual users, so access stays managed centrally in Entra ID.

Step 6 — Send the Federation Metadata URL to Revial

The final step is to send Revial your App Federation Metadata URL so we can complete the connection on our side.

On the SAML setup page, scroll to section 3 — SAML Certificates. Copy the App Federation Metadata URL. It looks similar to:

https://login.microsoftonline.com/<tenant-id>/federationmetadata/2007-06/federationmetadata.xml?appid=<app-id>

Send this URL to your Revial contact or to support@revial.ai. We activate SSO for your organisation within one business day.

After SSO is live

Revial does not provision SSO users just in time. A person signing in via SAML must already be a member of a team or hold a pending invitation — unknown SSO users are signed out and told to ask for an invitation. See managing members.

Need help? Contact support@revial.ai.