This article tells you how to set up an Attendee Single Sign-On integration, for EventsAir event Attendees (not users of EventsAir), who use the same Microsoft Entra ID account as you.
You’d set this up so that when your attendees are part of your company's Entra ID account, they can use single sign-on to log into your event’s interactive registration site. This single sign-on setup uses SAML protocols.
If you don’t see the "Attendee SSO" option in EventsAir, please contact your Account Manager.
NOTE: Microsoft Entra ID was previously known as Microsoft Azure Active Directory / AD. You may still see this name inside EventsAir.
Each organization may have slightly different versions or configuration of Microsoft Entra, so your setup steps may slightly vary to what you see here. This is a guide only, and is subject to your organization's specific security and operations, and changes by Microsoft.
First - create a new Enterprise Application in Azure
[Even if you already have EventsAir user SSO set up in Entra ID, we recommend setting up a separate enterprise application for Attendee SSO]
Go to your Azure Services portal and choose Microsoft Entra ID.
Select Enterprise Applications
On the “Enterprise applications | All applications” screen,
select “+ New application”
On the “Browse Microsoft Entra Gallery” screen,
select “+Create your own application”.
In the details for Create your own application, enter a unique name, such as alias-attendee-sso [where "alias" is your EventsAir alias].
Leave the bottom radio button selected [i.e. the Non-gallery option, as shown in the screenshot below] and click "Create". (You may have to scroll down to see the Create button.)
This may take a couple of minutes.
Next, assign users/groups to the Enterprise App.
(You'll need to have at least one user already set up in your Entra ID, and you need to add everyone that you want to be able to log in with SSO.)
You'll be in the "Overview" screen. Click the “Assign users and groups” option.
Then select "+Add user/group
As you've not yet selected users or groups for your new application, you'll see this:
Now, select the groups/users you want to add (search for users, check the boxes and press the “select” button).
Configure your SAML setup
Go back to “Overview” (top of left-hand menu) and choose “Set up single sign on".
You’ll need to select a single sign-on method. Choose “SAML”.
You should now see something like the below - choose "Edit" in the first box (numbered "1" on the left - it's got the heading "Basic SAML Configuration"):
Set up the link between EventsAir and your Entra ID
Log into EventsAir, and keep the two screens (EventsAir and Entra ID) open side-by-side so you can copy information across.
In EventsAir, go to Application Setup
Select External Connections
Select Attendee Single Sign-On from the left-hand menu.
Inside the Attendee Single Sign-On Setup screen:
Give your Attendee Single Sign-On Setup a name – this is just your name for the setup, if you have multiple. We’ve called our example one the same name as the Enterprise Application name (alias-attendee-sso).
Choose the SSO Integration Type (Azure Active Directory here means Entra ID).
The next thing you’ll see is a button to upload your “Identity Provider Certificate”.
Enter details from Entra ID into EventsAir and vice versa
[Technically, you could copy the same Entra ID credentials from EventsAir user Single Sign-On, if this is already set up in your EventsAIr environment, instead of following the steps below. But we suggest you create a new Enterprise Application just for Attendee Single Sign-On.]
Follow these steps in the order given below.
In the Entra ID SAML set-up, you should have selected "Edit" in “Basic SAML Configuration” (Box 1), so now you can add your Unique Identifier (this is the name of the Entra application you created earlier, e.g. alias-attendee-sso). You’ll also need this again in a moment.
Next, to get the Reply URL, you need to go back to EventsAir.
2. In the Attendee SSO set-up, scroll down to the section with the heading Enterprise Application Information Required. Add the same Unique Identifier from the previous step into the first field. Then copy the Reply URL...
....and paste the URL into the "Add reply URL" field in Entra ID.
Click Save in Entra ID.
Now, get your SAML Certificate:
3. Still in Entra ID, look for the SAML Certificates box (the box is numbered "3"). If you don't see a certificate ready to download, select Edit and click +New Certificate, then Save and close the window. This will generate a new certificate for you to download.
Return to the SAML Certificate box and now select the Download link, next to Certificate (Base 64).
4. Back in EventsAir, upload the certificate (where it says “Identity Provider Certificate”) – you may remember seeing this screenshot earlier.
Now go back to get more details from Entra ID.
5. In Entra ID, from the box called “Set up [your application name]” (box 4), copy the following:
- Login URL
- Microsoft Entra Identifier
- Logout URL
6. Go back into EventsAir, and paste each one into the equivalent field. It will look something like this:
Set Attributes & Claims
Go back to Entra ID to collect information from the “Attributes & Claims” box (Box 2).
Select “Edit”.
Click the field name so you can copy and paste it.
(If you click into the item, you’ll go to a screen where you can edit SSO attributes – we don’t recommend this unless you have the technical knowledge to do so.)
8. In EventsAir Attendee Single Sign-On, you’ll see a heading called: Azure AD SAML User Attributes & Claim Tags”.
This is where you’ll add in information from Entra ID.
Pay close attention to the names of the items as they’re not in the same order in EventsAir.
In Entra Id, there'll be a URL with “claims/name” at the end – that goes into “Unique User ID”.
The one with “claims/givenname” at the end goes into “First Name”.
The one with “claims/surname” at the end goes into “Last Name”.
The one with “claims/emailaddress” at the end goes into “Email”.
In EventsAir, save the SSO set up, and close the External Connections settings panel.
To add Attendee Single Sign-On to an Interactive (registration) site:
Use the interactive (registration) site builder to add the Sign-In Page component at the very top.
Configure the Sign-In Page Component:
o Click on the cog icon for the Sign In Page component.
o Expand the component with the arrow.
We recommend ONLY checking the box for “Enable Single Sign-On” and disabling other options.
Adjust the default heading “Single Sign On” if needed.
Select the name of your Attendee Single Sign-On setup from the dropdown menu.
What it looks like
After enabling Single Sign-On, attendees going to the interactive (registration) site will see the button to Login with SSO.
The “Next” button can't be used until they’ve signed in.
After clicking “Login with SSO”, they’ll be prompted to enter their Microsoft details:
After entering their Microsoft details and password, they’ll be logged immediately into the registration site and their name and email address will be already completed in the site:
