Once enabled, go to Administration > SAML Authentication.

1. In the Azure Admin Portal, go to Enterprise applications.
2. Click New application.

   

   ^{Click the image to enlarge.}

3. Click Create your own application.

   

   ^{Click the image to enlarge.}

4. Enter the name of the app.
5. Select Integrate any other application you don't find in the gallery (Non-gallery).
6. Click Create.

Provide specific users and groups access to the application

1. On the created Enterprise Application, click Assign users and groups
2. Click Add user/group.
3. Select the desired users or groups.
4. Click Assign.

Enable users to sign into their application using their Azure AD credentials

1. Under Set up single sign on, click Get started.
2. Configure the following:

   Azure (Enterprise Application):

   1. Basic SAML Configuration > Click Edit
      1. Identifier (Entity ID) - Copy the Service Provider entity ID from LMP.
      2. Reply URL (Assertion Consumer Service URL) - Copy the Single Sign On URL (ACS) from LMP.
   2. Attributes & Claims > Click Edit
      1. FED_ID - Add new claim > Name: FED_ID > Source attribute: <LMP Account Name>
   3. SAML Certificates > Click Edit
      1. Signing Option > Select Sign SAML response and assertion.
      2. Signing Algorithm > SHA-256.
      3. Download the Certificate (Base64). :
         Rename the .cer to .cert.:
         Upload it to Certificate under Identity Provider (IdP) Settings of LMP
   4. Set up the created application
      1. Login URL - Copy to IdP Single Sign URL of LMP.
      2. Azure ID identifier - IdP entity ID / issuer of LMP.
3. Test single-sign on with the created application.