---
title: "Azure setup"
canonical: "https://support.mercell.com/space/MNS/562790679/Azure%20setup"
format: markdown
---
Microsoft Azure single sign-on with Mercell
> Macro (toc)
## Configure single sign-on Azure
1. To configure single sign-on for with Azure, you need to have an Azure AD subscription and a Mercell SSO product.
2. In the **[Azure portal](https://portal.azure.com/)**, on the left navigation panel, click **Azure Active Directory** icon.
1. Navigate to **Enterprise applications**. Then go to **All applications**.
2. To add new application, click **New application** button on the top of dialog.
1. In the search box, type **Mercell**, select **Mercell** from result panel then click **Add** button to add the application.
1. In the Azure portal, on the **Mercell** application integration page, click **Single sign-on**.
1. On the **Single sign-on** dialog, select **Mode** as **SAML-based Sign-on** to enable single sign-on.
2. On the **Mercell Domain and URLs** section, perform the following steps:
> Macro (inline-media-image)
In the **Identifier** textbox, type the URL: [https://my.mercell.com](https://my.mercell.com)
1. On the **SAML Signing Certificate** section, click the copy button to copy **App Federation Metadata URL** and paste it into notepad.
1. Click **Save** button.
## > Macro (anchor)
Configure Azure users
1. Select Mercell application from Azure and select **Users and groups.**
1. Click **Add** button. Then select **Users and groups** on **Add Assignment** dialog.
1. On **Users and groups** dialog, select **wanted user** in the Users list.
2. Click **Select** button on **Users and groups** dialog.
3. Click **Assign** button on **Add Assignment** dialog.
Guide from Microsoft [https://docs.microsoft.com/da-dk/azure/active-directory/saas-apps/media/mercell-tutorial/tutorial_general_203.png](https://docs.microsoft.com/da-dk/azure/active-directory/saas-apps/media/mercell-tutorial/tutorial_general_203.png)
## Note to PowerShell on Azure
If you need to extract AD user information, you can do it with PowerShell. Methods can be found on Microsoft Azure documentation.
[https://docs.microsoft.com/en-us/powershell/module/azuread/get-azureaduser?view=azureadps-2.0](https://docs.microsoft.com/en-us/powershell/module/azuread/get-azureaduser?view=azureadps-2.0)
## Configure single sign-on Mercell website
1. Login to Mercell website as customer admin
2. Click on company name
3. Click on Single sign-on icon
1. Click add new
2. Type name, use company and set domain to company domain and save
3. > Macro (anchor)
> Macro (anchor)
If you have several email domains that should be linked with different customers in Mercell, set "Email domain" to users' primary mail (SMTP) and check "Match e-mail to domain". This will enable the option to have a shared SSO connection that directs users from a shared AD to several customers in Mercell.
1. Click Update to insert SAML Entity ID URL from Azure. Insert value (See section 1. number 9) and press "Update".
1. The result should look something like this
2. Click save
3. Your SSO setup is now completed. (SSO enforcement is optional, but recommended)
4. SSO - The SSO Enforcement consequence
**SSO Enforcement notice!**
Please secure that all your user has been informed of the «SSO-Only» switchover, or they will see the screen below when they try to login manually without any success. (That is why it should be a planned date for going into production for all.)The same alert also happens, if you remove them from your local MS ADFS server.
> Macro (inline-media-image)
1. SSO: How to login?
If you usually use your corporate intranet for SSO login, then do as before.If you use an URL from Mercell, or connect directly to [https://my.mercell.com](https://my.mercell.com), then you only need to click on the button called: «SSO login».
> Macro (inline-media-image)
You will then have to enter your e-mail address as used in your company and click «Login». You will then be redirected to your own local SSO server, for a password. "Remember me" checkbox can be used to ensure that when accessing Mercell.com user is redirected directly to your own local SSO server. If login fails at local SSO server, user can access this page again and make changes.
> Macro (inline-media-image)
After you entered your password inside your local corporate SSO server, then you will be redirected back to Mercell again, but you are now automatically logged into our portal.
You arrive either at your usual starting homepage, or at the specific Mercell URL you originally clicked on the first time.
## For the customer's IT-department. Map own users
Script for extracting user's that need to be mapped to Mercell.Script:
get-aduser -filter * | ft Name,UserPrincipalName > c:\test\test.txt (or preferably a CSV-file)
*The result should look like this*
Rabattavtale NO rabattavtale@mercell.com
IUSR_web1 IUSR_web1@mercell.com
PdfADev pdfadev@mercell.com
Test VPN tv@mercell.com
This script is used to do an AD BIND, which ensures that your existing users inside our portal are not asked to register as new users in our portal, when they start using the SSO. You can import this as Customer administrator by first "Export users". This will export an Excel file where only "User ID" is editable.> Macro (anchor)
Note that it is not allowed to rename this file as you will then not be able to import the file. Fill in "UserPrincipalName" in "User ID" save the file and "Import users". This will map the users already in Mercell to their AD user.
> Macro (inline-media-image)
> Macro (anchor)
> Macro (anchor)
This can be repeated if new users' needs to be added. It can also be done on contact, (my.mercell.com/m/crm/customer.aspx – Contacts) where Customer Admin will have a new field "External User ID".
> Macro (inline-media-image)
> Macro (anchor)
Note that if you have a user for restricted access named "(company name) SemiAnonymous users", it is important that this user has UserID SemiAnonymous, and this should not be deleted as this will remove access for the semi anonymous users.
Before starting the implementation, it is advisable to first do a startup meeting with Mercell, as there is some planning involved, and some steps to understand to not get duplicate problems or problems with users.
There is also a large impact on how the processes for creating new users are, both before, during and after the production. The success of the implementation will be determined on good control of the monitoring of this, as well as good communication with all relevant users involved.
## New Users
[Find more about new users here](https://mercell.atlassian.net/wiki/spaces/MNS/pages/615318031/New+user)
> Macro (contentbylabel)