To integrate Beams SSO with Azure (Microsoft Entra), please follow next steps

1. Sign in to the Microsoft Entra admin center as at least a Cloud Application Administrator
2. Browse to Identity > Applications > Enterprise applications > All applications
3. Click Create your own application
4. Enter your preferred name for Beams SSO integration, such as Beams SSO
5. Select Integrate any other application you don't find in the gallery (Non-gallery)
6. Once newly created application opens, select Single sign-on in the left menu
7. Navigate to SAML
8. Edit Basic SAML configuration

| Identifier | EU clients: urn:amazon:cognito:sp:eu-central-1_1pQZKhQay US clients: urn:amazon:cognito:sp:us-east-1_WHEMY4HQe | | --- | --- | | Reply URL | EU clients: https://eu.auth.beams.tech/saml2/idpresponse US clients: https://us.auth.beams.tech/saml2/idpresponse |

1. Open Attributes & Claims and ensure it’s mapped correctly (should be the default):

http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress to email http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname to first name http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname to surname http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name to name

1. Note the App Federation Metadata Url and send it to the Beams team