Sign in to the Azure portal and choose the Azure Active Directory card:

Figure 42. Azure Active Directory

Open Groups and click New group: here you create the groups that will be added later in LogScale for synchronization. For example, you can create a logscale_admin group.

Figure 43. Groups in Azure AD

Open Enterprise Applications and click New application:

Figure 44. Enterprise Applications in Azure AD

From the Browse Azure AD Gallery page:

Figure 45. Create your application in Azure

Click Create: your application is now added successfully.

In the new application page, click Single sign on and then choose SAML as your single sign-on method:

Figure 46. Select SAML single sign-on

In the Basic SAML Configuration window:

Figure 47. Basic SAML Configuration settings

In the SAML-based Sign-on page of your newly created application, copy Login URL, Azure ID Identifier and the text of the Certificate (Base 64) and note them down, as you will need to copy them later in LogScale.

Figure 48. SAML-based Sign-on information

Click + Add a group claim and select which groups you want to be associated with the users e.g., Security Groups:

Figure 49. Add a group claim

From this same page:

In the Manage claim window, ensure that Name identifier format and Source are set as in figure below:

Figure 50. Manage claim

Still in the Manage claim window, click under Scoped Groups to select the new group and assign user type (e.g. Members, Admin) and user.mail as the value:

Figure 51. Add user types to group