How to set up SAML SSO with Entra ID (formerly Azure AD)

This feature requires an Enterprise plan.

This article discusses the configuration process for SAML single sign-on (SSO) with Vimeo Enterprise using Entra ID.

For an overview of how SSO works with Vimeo Enterprise and the first steps of this process, please head to our Setting Up SSO guide.

⚠️Note: Only the paid versions of Entra ID are supported; the Vimeo SSO solution does not support the free Entra ID tier. To configure SAML single sign-on for a non-gallery application without writing code, you need to have a subscription or Entra ID Premium.

For Enterprise Accounts with Workspaces: This feature is managed at the Organization level by Organization Owners and Admins. For more information, visit How to edit my Organization's settings.

In this article:

• How to add a non-gallery application
• How to configure user sign-in properties
• How to edit the basic SAML configuration
• How to configure my user attributes and claims
• How to obtain the SAML signing certificate
• Where can I retrieve my Entra ID SSO URL?
• Suggested next steps

How to add a non-gallery application

Vimeo Enterprise will be added as a "non-gallery" application to your Entra ID portal. This means it isn't a listed third-party integration available to all Entra ID administrators.

1. Sign in to the Microsoft Entra admin center using your Microsoft Identity platform administrator account.
2. Follow the steps on how to create your own application. 
   
3. Enter the display name for your new application as Vimeo Enterprise.
4. Select the third option Integrate any other application you don't find in the gallery (Non-gallery). 
5. Select Create. The application Overview page will open.

How to configure user sign-in properties

1. Follow these steps to navigate to the application properties page.
2. Configure how users who are assigned or unassigned to the application can sign into the application, and if a user can see the application in the access panel.
   • Enabled for users to sign-in determines whether users assigned to the application can sign in.
   • User assignment required determines whether users who aren't assigned to the application can sign in.
   • Visible to user determines whether users assigned to an app can see it in the access panel and O365 launcher.
3. Optionally, you can add a custom logo.
4. When you're finished, select Save.

How to edit the basic SAML configuration

1. Follow these steps to navigate to the Set up Single Sign-On with SAML - Preview page. 
   
2. To edit the basic SAML configuration options, select Edit (the pencil icon) in the upper-right corner of the Basic SAML Configuration section.

3. Enter the following settings:

   Field	Value
   Identifier (Entity Id)	Paste the Entity ID from Vimeo
   Reply URL	Paste the ACS URL from Vimeo
   Sign-on URL	Optional. Please leave this blank.
   Relay State	Optional. Please leave this blank.
   Logout URL	Optional. Please leave this blank.

How to configure my user attributes and claims

When a user authenticates via Entra ID SSO, your Entra ID account sends some basic information about the user to Vimeo. You will need to configure these values.

1. In the Set up Single Sign-on with SAML page, scroll to the User Attributes & Claims section and select Edit (the pencil icon) in the upper-right corner.
   

2. Configure these attributes as the following:

   Name	Value
   firstName	user.givenname
   lastName	user.surname
   email	user.email

3. Remove the namespace schema URL from the mapping attributes; ensure that the Claim name column matches the Name column above. 
   

To configure group claims, select Add group claim in the User Attributes & Claims section. For details, see Configure group claims.

More on assigning users and groups

• How to manage SSO Groups
• How to share and manage content with Groups
• Assign users or groups to the application in Microsoft
• Configure automatic user account provisioning in Microsoft

How to obtain the SAML signing certificate

1. On the Set up Single Sign-on with SAML page, scroll to the SAML Certificate section.
   
2. Configure the following settings for the certificate by selecting Edit (the pencil icon):
   • Expiration: Set for the maximum duration, three years from today's date
   • Signing Algorithm: SHA-256
   • Notification Email: The email address of someone in your organization responsible for administering your Entra ID account
3. Download the Base64 version of the certificate. This should be a .pem or .crt file.
4. Upload your certificate to the IdP certificate section on Vimeo.

Where can I retrieve my Entra ID SSO URL?

In the Set up Vimeo Enterprise section, you can find the the SSO Login URL which Vimeo requires to link to your Identity Provider. We do not need the Microsoft Entra Identifier or the Logout URL.

Paste the URL into the Sign-In URL field on Vimeo.

Save your SAML connection, test login, and complete your SSO setup. Make sure you’ve also assigned your users in Entra ID to the Vimeo app so they can log in through your IdP.

Suggested next steps

• After you’ve set up SAML SSO with Entra ID, you can set up SCIM.