To set up SSO, first create an account with either a password or with a personal SSO provider (Google or Microsoft). This account will be the admin of the organisation in this application and can configure the Microsft Entra SSO on the subscriptions settings page.

If your organisation manages its users with Microsoft Entra ID, you can add OnePager Architect as an Enterprise application there. With this, you can manage which users of your tenant will have access to OnePager Architect.

1. Go to the Microsoft Entra admin center, Identity > Applications > Enterprise applications.
2. Click on New Application, then Create your own application.
3. Enter "OnePager Architect" as the name, choose "Integrate any other application you don't find in the gallery (Non-gallery)", then press Create.
4. On the left side-panel, go to Single sign-on and choose SAML.
5. Either download the OnePager Architect metadata XML file from here and upload it as "Upload metadata file" or edit the "Basic SAML configuration" and enter the following values manually:

Identifier: onepager-architect

Reply URL: https://www.api.analog.onepagerarchitect.com/auth/saml/callback

6. Then press Save and download the Certificate (Base64) in the SAML Certificates section, and upload it to this form.
7. You can find the Tenant ID of your organisation in Identity > Overview.

By default, only users who are assigned to this application in Entra will be able to log in using the Enterprise Microsoft sign-in and their business Microsoft account, as long there are available licenses in your organization (no invitation needed!). You can revoke their access at any time from Microsoft Entra, however this will not free up their license until you remove them from the organisation in the OnePager App. To allow any user from your tenant to use this application, go to the Properties of the Enterprise Application, and change "Assignment required?" to "No".