Setting up Azure AD / Entra SSO

In HelloCivic

Open Settings → SSO and copy the ACS URL (we'll call this the "Reply URL" in Azure) and Entity ID ("Identifier").

In Microsoft Entra

1. Open Entra admin → Enterprise applications → New application → Create your own application.
2. Name it "HelloCivic" and pick Integrate any other application you don't find in the gallery (Non-gallery).
3. Open the new app → Single sign-on → SAML.
4. Edit Basic SAML Configuration:
   • Identifier (Entity ID): paste from HelloCivic.
   • Reply URL (ACS URL): paste from HelloCivic.
5. Edit Attributes & Claims:
   • emailaddress → user.mail
   • givenname → user.givenname
   • surname → user.surname
6. Download the Federation Metadata XML from section 3.

Back in HelloCivic

Paste the Federation Metadata XML into the SSO settings page or copy individual values (Login URL, Entra Identifier, Certificate). Click Test connection, then Enable.

Assign users

In Entra, assign the app to users or groups. They'll see HelloCivic in myapps.microsoft.com.