> ## Documentation Index
> Fetch the complete documentation index at: https://hireflixsl.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Setting Up SSO with Azure AD

## Overview

How to set up SSO between Hireflix and Azure AD.

<Warning>
  Only assign people whose email matches an email that's part of your team in Hireflix, otherwise they won't be able to log in.
</Warning>

## Steps

<Steps>
  <Step title="Create the enterprise application">
    Go to **Azure AD > Enterprise Applications > Create an app** and name it Hireflix (or as you wish).
  </Step>

  <Step title="Open Single Sign On">
    On the left-hand menu, click **Single Sign On**. This opens the app's SSO setup.
  </Step>

  <Step title="Get the Hireflix metadata file">
    Go to [**Hireflix > My Account > Single Sign On**](https://admin.hireflix.com/en/my-account/sso) and open the **Service Provider Metadata Endpoint** in a new tab. Save its contents as an XML file.
  </Step>

  <Step title="Upload the metadata file to Azure">
    Go back to Azure and click **Upload metadata file**, then upload the file you saved in the previous step.

    <Frame>
      <img src="https://mintcdn.com/hireflixsl/VDRYCrZwKf8DNtoK/images/hireflix-userguide-azuread-4.png?fit=max&auto=format&n=VDRYCrZwKf8DNtoK&q=85&s=69db7c9320c637366a44051e1bc1db29" alt="Uploading the metadata file to Azure AD" width="1270" height="504" data-path="images/hireflix-userguide-azuread-4.png" />
    </Frame>
  </Step>

  <Step title="Configure the email claim">
    Go to the **Attributes & Claims** section and click **Edit**. In the required claims section, edit the first claim so its source attribute is `user.mail`, `user.otheremail`, or any attribute that matches the email address of your Hireflix account.

    <Frame>
      <img src="https://mintcdn.com/hireflixsl/VDRYCrZwKf8DNtoK/images/hireflix-userguide-azuread-5.png?fit=max&auto=format&n=VDRYCrZwKf8DNtoK&q=85&s=294f4f1ea9cbc83c0b863538990b52aa" alt="Configuring the email claim in Azure AD" width="1576" height="421" data-path="images/hireflix-userguide-azuread-5.png" />
    </Frame>

    <Note>
      This is needed so Azure AD sends the raw email to Hireflix in the SAML2 metadata exchange.
    </Note>
  </Step>

  <Step title="Download the Federation Metadata XML">
    Go back to the SSO configuration screen and download the **Federation Metadata XML**.

    <Frame>
      <img src="https://mintcdn.com/hireflixsl/VDRYCrZwKf8DNtoK/images/hireflix-userguide-azuread-6.png?fit=max&auto=format&n=VDRYCrZwKf8DNtoK&q=85&s=8deb5ba922c9413e0d43de14a6827cf5" alt="Downloading the Federation Metadata XML from Azure AD" width="741" height="380" data-path="images/hireflix-userguide-azuread-6.png" />
    </Frame>
  </Step>

  <Step title="Upload the metadata to Hireflix">
    Go to **Hireflix > My Account > Single Sign On** and upload the file you generated in the previous step.

    <Frame>
      <img src="https://mintcdn.com/hireflixsl/VDRYCrZwKf8DNtoK/images/hireflix-userguide-okta-10.png?fit=max&auto=format&n=VDRYCrZwKf8DNtoK&q=85&s=2e6d8540295458d5c765c5ba43e4581d" alt="Uploading the Identity Provider Metadata XML to Hireflix" width="3456" height="1780" data-path="images/hireflix-userguide-okta-10.png" />
    </Frame>
  </Step>

  <Step title="Save">
    Click **Save** — SSO should now be configured and working properly. Make sure your users have access to the Azure AD Enterprise App.
  </Step>
</Steps>