Enabling SSO in Luzmo with Entra

This guide will walk you through the steps to enable Single Sign-On (SSO) in Luzmo using Microsoft Entra ID (formerly Azure Active Directory) as your Identity Provider (IdP).

✅ This setup requires access to Luzmo's SSO Settings (available to Organization Owner).

1. Access SSO Settings in Luzmo

  1. Go to Luzmo App
  2. Navigate to: Settings → Organization
  3. Locate the SSO Settings section (collapsed by default).
  4. Click Expand to open the configuration panel.

2. Create a New Application in Microsoft Entra ID

In the Azure Portal, follow these steps:

➤ Register a new application

  • Go to Microsoft Entra ID → App registrations → New registration
  • Name: Luzmo
  • Supported account types: Select what fits your organization (usually “Accounts in this organizational directory only”).
  • Redirect URI: Select Web and paste the Callback URL from Luzmo’s SSO Settings.
  • Click Register.

3. Configure Authentication & Claims

After the app is created:

  1. Go to Authentication → verify the Redirect URI is correct.
  2. Go to Token configuration → click + Add optional claim → select ID token → choose email → Save.
    • This ensures Luzmo receives the correct user email.
  3. (Optional but recommended) Ensure the app has the default API permissions: openid, profile, email.4. Collect Application Details

In the Azure Portal, copy these values from your registered application:

Field Where to find it in Azure
Client ID Application (client) ID
Client Secret Create under Certificates & secrets
Issuer URL Found under Endpoints → OpenID Connect metadata document (base URL)

5. Complete the SSO Configuration in Luzmo

Back in Luzmo, under SSO Settings, enter the following:

  • Client ID → from Azure
  • Client Secret → from Azure
  • Issuer URL → from Azure

Once you enter the Issuer URL:

  • Click Autofill to automatically populate:
    • Authorization URL
    • Token URL
    • User Info URL

Click Update SSO Settings to save.

6. Add Users to Luzmo

For users to authenticate via SSO, their account must exist in Luzmo.

You can create accounts:

  • Via the Luzmo UI:
    • Go to Settings → Organization
    • Scroll down and click Add Member
  • Via API:

7. User Login via SSO

Once SSO is configured:

After successful login, they are redirected back and logged into Luzmo.

💬 Questions or Support?

If you need assistance during setup, reach out to our team at cs@luzmo.com.!

Need more information?

Do you still have questions? Let us know how we can help.
Send us feedback!