This article tells you how to set up EventsAir User Single Sign-On integration, for EventsAir users (not Attendees), who use the same Microsoft Entra ID account as you, so that when they're logged into your company's Entra ID account they can use single sign-on to log into EventsAir.
For information about using SSO for Attendees (Attendee SSO), please contact your Account Manager.
NOTE: Microsoft Entra ID was previously known as Microsoft Azure Active Directory / AD. You may still see this name inside EventsAir.
First - create a new Enterprise Application in Azure
[Even if you already have Attendee SSO set up in Entra ID, you may want to set up a separate enterprise application for EventsAir User SSO]
Go to your Azure Services portal and choose Microsoft Entra ID.
Select Enterprise Applications
On the “Enterprise applications | All applications” screen,
select “+ New application”
On the “Browse Microsoft Entra Gallery” screen,
select “+Create your own application”.
In the details for Create your own application, enter a unique name, such as alias-sso [where "alias" is your EventsAir alias].
Leave the bottom radio button selected [i.e. the Non-gallery option, as shown in the screenshot below] and click "Create". (You may have to scroll down to see the Create button.)
This may take a couple of minutes.
Next, assign users/groups to the Enterprise App.
(You'll need to have at least one user already set up in your Entra ID, and you need to add everyone that you want to be able to log in with SSO.)
You'll be in the "Overview" screen. Click the “Assign users and groups” option.
Then select "+Add user/group
As you've not yet selected users or groups for your application, you'll see this:
Now, select the groups/users you want to add (check the boxes and press the “select” button).
Configure your SAML setup
Go back to “Overview” (top of left-hand menu) and choose “Set up single sign on".
You’ll need to select a single sign-on method. Choose “SAML”.
You should now see something like the below - choose "Edit" in the first box (numbered "1" on the left - it's got the heading "Basic SAML Configuration"):
Set up the link between EventsAir and your Entra ID
Log into EventsAir, and keep the two screens (EventsAir and Entra ID) open side-by-side so you can copy information across.
In EventsAir, go to Application Setup
Select External Connections
Select EventsAir Single Sign-On from the left-hand menu.
IMPORTANT – For EventsAir User Single Sign-On, DO NOT select "ATTENDEE SINGLE SIGN-ON" at this step, even if you can see that option.
Inside the EventsAir [user] Single Sign-On Setup screen:
First, check the box for “Enable SSO”
Leave the User Authentication mode as SSO and Login page.
This allows EventsAir technical support and your Success Specialist to sign in and help as required within your environment as needed.
(Later, when you create an EventsAir user from your own organization, you can make their login via SSO only if you want to. See further below for information.)
Enter details from Entra ID into EventsAir and vice versa
[Technically, you could copy the same Entra ID credentials from Attendee Single Sign-On, if this is already set up in your EventsAIr environment, instead of following the steps below. But we suggest you create a new Enterprise Application just for EventsAir User Single Sign-On.]
Follow these steps in the order given below.
In the Entra ID SAML set-up, you should have selected "Edit" in “Basic SAML Configuration” (Box 1), so now you can add your Unique Identifier (this is the name of the Entra application you created earlier, e.g. alias-sso). You’ll also need this again in a moment.
Next, to get the Reply URL, you need to go back to EventsAir.
2. In the EventsAir SSO set-up, scroll down to the section with the heading Enterprise Application Information Required. Add the same Unique Identifier from the previous step into the first field. Then copy the Reply URL...
....and paste the URL into the "Add reply URL" field in Entra ID.
Click Save in Entra ID.
Now, get your SAML Certificate:
3. Still in Entra ID, look for the SAML Certificates box (the box is numbered "3"). If you don't see a certificate ready to download, select Edit and click +New Certificate, then Save and close the window. This will generate a new certificate for you to download.
Return to the SAML Certificate box and now select the Download link, next to Certificate (Base 64).
Open the downloaded Certificate file in Notepad and copy the contents.
4. Back in EventsAir, paste the certificate into the box called SAML Signing Certificate (Base64)
Now go back to get more details from Entra ID.
5. Go back to Entra ID, and from the box called “Set up [your application name]” (box 4), copy the following:
- Login URL
- Microsoft Entra Identifier
- Logout URL
6. Go back into EventsAir, and paste each one into the equivalent field. It will look something like this:
7. In Entra ID, go back up to “Basic SAML Configuration” (Box 1), copy the Unique Identifier (Entity ID) = (the name of your application).
8. In EventsAir, again find the heading Enterprise Application Information Required (that you used in Step 2).There is a field called "Identifier" where you should should have already added the unique identifier/Entity ID.
In EventsAir, save the SSO set up, and close the External Connections settings panel.
Set up another EventsAir User with Single Sign-On
In Application Setup, click Users.
To add a user who is provisioned in your Entra ID account, select whether you want SSO Only and Login page (i.e, using EventsAir User Name and Password) or SSO Only.
Ensure the person's username AS DISPLAYED IN Entra ID [which may be their email address] is entered into the SSO Unique User Identifier box.
NOTE: You will need to update any users in EventsAir who were set up before you set up SSO. You'll need to ensure they're added to your Entra ID Enterprise Application too.
Any new users who will be accessing EventsAir need to be added. If not, and they try to access EventsAir via Single Sign-on, they'll get a notification advising them that their account needs to be configured in EventsAir first. (This also triggers an email to your Administrators advising that a new user needs to be provisioned. You can decide who these Administrators should be in your SSO set up, as shown below.)
Once the Administrator creates this user in the EventsAir user list, they should let the user know that EventsAir User SSO login is now available to them.
Now, other EventsAir users in your team should see this on the login screen:
When they choose "Login with SSO", they will be taken to their Microsoft Login screen:
Once they've entered their Microsoft details and password, they'll be logged into EventsAir. Depending on the organizational setup, they may also (sometimes) need to use the Microsoft Authenticator App during this process.