...

1. Go to SAML Signing Certificate.
2. Download Federation Metadata XML (to be imported as Metadata File at App4LegalLEXZUR).

Obtain Client ID & Client Secret

1. From App registrations in Azure AD, select your application.

2. Select Overview.
3. Copy Application (client) ID (to be pasted as Client ID at App4LegalLEXZUR).

4. Select Certificates & secrets.

5. Select Client secrets → New client secret.

6. Provide a description of the secret, and a duration. When done, select Add.

7. After saving the client secret, the value of the client secret is displayed. Copy this value because you won't be able to retrieve the key later (to be pasted as Client Secret at App4LegalLEXZUR).

Client Secret

API Permissions

1. Select API Permissions.

2. Select Add a permission → Microsoft Graph.

3. Add the Following Permission.
   
4. Don't forget to grant admin consent for these permissions.

Configure

...

LEXZUR as SAML Service Provider

Enable SSO in

...

LEXZUR

1. Sign in to your App4Legal LEXZUR instance App4legalLEXZUR.

2. Go to the Settings → Single Sign On →Setup .

3. Select Azure Active Directory 
4. Paste Client ID & Client Secret (copied before from Azure AD).
5. Upload Metadata File (downloaded before from Azure AD).
6. Click Save

Import Users from Azure AD to

...

LEXZUR

1. Go to the Settings → Users & Permissions →Import Users from Azure Active Directory.
2. Look up the users and choose the appropriate User Group.

...