Articles on: Schools & enterprise plans

Setting up SAML Single Sign-On (SSO) with Microsoft Entra ID for SimplyPrint

This guide is for SimplyPrint customers with the Print Farm, School or Enterprise plan who use Google Workspace as their Identity Provider for Single Sign-On.If you don't use Google Workspace, but rather another SSO provider, check out our other SSO guide(s) here: Set up Single sign-on (SSO) for SimplyPrint


This guide explains how to connect Microsoft Entra ID (formerly Azure AD) with SimplyPrint using SAML 2.0. After setup, staff and students can log in to SimplyPrint using their Microsoft 365 accounts.


You can follow the interactive guide below, or the written instructions further down to see exactly how to set up SimplyPrint SSO with Microsoft Entra.


Tip: if you or anyone from your team already has a SimplyPrint account, created without SSO, you can link your account after setting up SSO! More here: Linking your existing SimplyPrint account to your SSO account


Part 1: Prepare SimplyPrint

  1. Go to your SimplyPrint dashboard → Organization Settings → Registration & SSO.
  2. Enable SAML Single Sign-On (SSO).
  3. Click Edit SAML Configuration.


Keep this tab open — you’ll come back to paste Microsoft details into it.


Part 2: Create a new enterprise application in Microsoft Entra


More info on how to add an Enterprise Application in Entra can be found in the Microsoft Entra Learning space: https://learn.microsoft.com/en-us/entra/architecture/auth-saml and https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/add-application-portal


  1. Open the Microsoft 365 Admin Center and click Identity, or go directly to Microsoft Entra Admin Center.
  2. Go to Identity → Applications → Enterprise applications.
  3. Click + New application.
  4. Choose Create your own application.
  5. Enter a name (e.g. SimplyPrint) and click Create.


Part 3: Assign users and groups

  1. In the new application, go to Users and groups.
  2. Decide which users (or groups) should be allowed to access SimplyPrint.
    • Example: assign “All Students” and “All Teachers” groups.


Part 4: Configure SAML SSO in Entra

  1. In the new application, go to Single sign-on.
  2. Choose SAML as the sign-on method.
  3. Under Basic SAML Configuration, click Edit.
  4. Enter the following values (found in your SimplyPrint metadata file):
    • Identifier (Entity ID) → Copy from SimplyPrint metadata.
    • Reply URL (ACS URL) → Copy from SimplyPrint metadata.
  1. Click Save.


Part 5: Download and copy the IdP certificate

  1. In the Entra Single sign-on setup page, go to SAML Certificates (Step 3).
  2. Download the Base64 certificate.
  3. Open it in a text editor and copy the full content (including -----BEGIN CERTIFICATE----- and -----END CERTIFICATE-----).


Part 6: Enter Microsoft Entra details in SimplyPrint

Back in SimplyPrint → Edit SAML Configuration, fill in:

  • Entity ID – Found in Entra → Single sign-on → Identifier.
  • SSO URL (Login URL) – Found in Entra → Single sign-on → Login URL.
  • X.509 Certificate – Paste the Base64 certificate content.
  • SSO Binding – Leave as HTTP-Redirect (default).

Click Save.


Part 7: Configure attribute mappings

In Microsoft Entra, under Attributes & Claims, map user data to SimplyPrint.

Required

SimplyPrint field

Typical Microsoft attribute

Notes

first_name

givenname

Required

last_name

surname

Required

email

emailaddress, userprincipalname or mail

Optional

Optional

SimplyPrint field

Typical Microsoft attribute

Notes

user_group

groups

Optional. Requires group claim setup

school_is_teacher

Custom claim (true/false)

Optional. For schools

school_classes

Custom claim or memberOf

Optional. For schools

👉 Attribute names in Entra often look like schema URLs, e.g.:

Both are valid — just match what you configure in SimplyPrint.


Part 8: Test the connection

  1. In Microsoft Entra → Single sign-on, click Test.
  2. Sign in with a user you assigned earlier.
  3. If login fails, check:
    • Identifier and Reply URL match SimplyPrint’s metadata.
    • Certificate is copied correctly.
    • Attribute mappings are set and match SimplyPrint’s fields.


Part 9: (Optional) Show your school on the SimplyPrint login page

To make login easier for students:

  1. In Organization Settings → Registration & SSO, enable:

“Show school/organization in the public list shown on login page.”

  1. Your school will now appear in the dropdown at:


See how to log in using SSO here: Signing in with SSO / Organization Login


Link existing accounts (email & password signups) to an SSO account

If you, members of your team or students have already signed up for your SimplyPrint organization without SSO, by simply registering on our site with their name, email and password, they can


Learn how to here: Linking your existing SimplyPrint account to your SSO account


Issues? Troubleshoot your SSO integration here!

Visit our "SSO troubleshooting" guide for troubleshooting help: SSO troubleshooting: how to fix errors like "first_name not set"


Updated on: 12/09/2025

Was this article helpful?

Share your feedback

Cancel

Thank you!