Once you have a Microsoft Entra account set up, as a Team Plan Administrator, you can choose to require login via SAML for your users. SAML login can be configured from ScreenPal's Team Feature Access settings.
1. Log into your ScreenPal Team account as a Team Administrator.
2. Click your user icon in the top right and select Settings.
3. From the menu on the left, select Team Feature Access.
4. Under Feature Access Default, click the Edit icon.
5. On the Feature Access Default dialog, enable the Access URL setting. Enter a value for the URL that your team will use to initiate the SAML login, and enter a title for the page. Leave the remaining options as they are, and click Save.
6. Next, in the left menu, click Authentication.
7. Under SAML User Access, move the SAML Authentication toggle to the ON position.
8. Leave the SAML User Access page open, you'll return to it in a later step. Go to the Microsoft Entra Admin Center.
9. From the menu on the left, select Applications > Enterprise applications.
10. On the inner side bar, select All applications, and then click +New application.
11. Search for ScreenPal using the search bar, and then select it.
12. Click Create.
13. This opens a newly created ScreenPal application. From the menu on the left, under Manage, select Single sign-on, and then click SAML.
14. Under Basic SAML Configuration, click Edit.
15. Click Add reply URL and enter https://screencast-o-matic.com/saml/sp as the value.
16. Now, go back to ScreenPal. Copy the Access URL that you created earlier.
17. Back in the Microsoft Entra Admin Center, paste this URL for Sign on URL.
18. Leave all other settings blank and click Save.
19. Scroll down to the SAML Certificates section and click Download next to the Federation Metadata XML file.
20. Go back to the Authentication Settings page in ScreenPal. Under Upload IDP Metadata File, click Choose File and upload the Federation Metadata XML file.
When the file has been uploaded successfully, you will see a green "Verified" message.
21. If you would like your users to automatically be created in ScreenPal when they log in using SAML, select the Create users on ScreenPal using SAML for this Access URL checkbox. Then click Save.
22. Before your users can use the Access URL you created, you need to add them to the Users and groups section in the ScreenPal app within Microsoft Entra as shown below:
After you have added your users, you can verify that SAML login is working correctly by having your team members visit the Access URL and log in using their Microsoft credentials. If everything works as expected, they should then be logged into their ScreenPal account.