Sign in to the Azure portal and choose the Azure Active Directory card:

Figure 28. Azure Active Directory

Open Groups and click New group: here you create the groups that will be added later in LogScale for synchronization. For example, you can create a logscale_admin group.

Figure 29. Groups in Azure AD

Open Enterprise Applications and click New application:

Figure 30. Enterprise Applications in Azure AD

From the Browse Azure AD Gallery page:

Figure 31. Create your application in Azure

Click Create: your application is now added successfully.

In the new application page, click Single sign on and then choose SAML as your single sign-on method:

Figure 32. Select SAML single sign-on

In the Basic SAML Configuration window:

Figure 33. Basic SAML Configuration settings

In the SAML-based Sign-on page of your newly created application, copy Login URL, Azure ID Identifier and the text of the Certificate (Base 64) and note them down, as you will need to copy them later in LogScale.

Figure 34. SAML-based Sign-on information

Click + Add a group claim and select which groups you want to be associated with the users e.g., Security Groups:

Figure 35. Add a group claim

From this same page:

In the Manage claim window, ensure that Name identifier format and Source are set as in figure below:

Figure 36. Manage claim

Still in the Manage claim window, click under Scoped Groups to select the new group and assign user type (e.g. Members, Admin) and user.mail as the value:

Figure 37. Add user types to group