How to configure Microsoft Entra ID SAML SSO

Set up single sign-on (SSO) for Calendly using Microsoft Entra ID. SSO lets your team log into Calendly with their work credentials. This simplifies user management and keeps your account secure.

Before you begin

You'll need:

• Admin access to your Calendly account
• Admin access to Microsoft Entra ID
• A work or school account in Microsoft Entra ID

Step 1 – Open Calendly's SSO settings

1. Open Settings → Access → Single sign on.

Keep this page open. You'll need to copy values from this page into Microsoft Entra ID.

Step 2 – Create a Calendly application in Microsoft Entra ID

1. In a new browser tab, log in to the Microsoft Entra ID admin center.
2. Select Enterprise Applications.
3. Select New Application.
4. Select Create your own application.
5. Enter "Calendly" as the name.
6. Select Integrate any other application you don't find in the gallery.
7. Select Create.

Microsoft Entra ID will now create a new application for Calendly.

Step 3 – Set up SAML in Microsoft Entra ID

1. Go back to Calendly.
2. Select SAML.
3. Select Edit on the Basic SAML Configuration box.
4. In the Identifier (Entity ID) field, enter https://example.com
5. In the Reply URL field, enter https://example.com
• The values entered here are temporary. You'll replace them later with the correct values from Calendly.
6. Select Save.
7. Refresh the page to load the SAML Signing Certificate.

Step 4 – Copy values from Microsoft Entra ID to Calendly

1. In Microsoft Entra ID, look for the Set up Calendly SAML section.
2. Copy the Microsoft Entra Identifier value.
3. Switch back to the Calendly SSO settings page.
4. Paste this value into the Entity ID field.
5. Select Save in Calendly.
6. Go back to Microsoft Entra ID.
7. Copy the Login URL.
8. In Calendly, paste it into the Identity provider's SAML HTTP Request URL field.
9. Select Save in Calendly.

Step 5 – Handle the SAML signing certificate

Choose one option:

Option 1: Create a new certificate

1. In Microsoft Entra ID, go to the Signing Certificate section.
2. Select Add certificate.
3. Select New Certificate.
4. Select Save.

Option 2: Download the existing certificate

1. In Microsoft Entra ID, select the 3-dot menu next to the certificate.
2. Select Base64 certificate download.
3. Select Save.

Either way, copy the certificate contents and paste them into the X.509 certificate field in Calendly. Then select Save in Calendly.

Step 6 – Copy Calendly values back to Microsoft Entra ID

1. In Calendly, copy the Audience URL.
2. Go back to Microsoft Entra ID.
3. Select Edit on the Basic SAML Configuration box.
4. Paste the Audience URL into the Identifier (Entity ID) field.
5. In Calendly, copy the ACS URL.
6. In Microsoft Entra ID, paste it into the Reply URL field.
7. In Calendly, copy the Default relay state value.
8. In Microsoft Entra ID, paste it into the Relay State field.
9. Select Save in Microsoft Entra ID.

Step 7 – Set up user claims

User claims tell Microsoft Entra ID which information to send to Calendly.

1. In Microsoft Entra ID, select Edit in the User Attributes and Claims box.
2. Under Required claim, select Unique User Identifier (Name ID).
3. For Source attribute, search for and select user.mail.
4. Select Save.

Step 8 – Add email claims

1. Select Delete on any existing Additional claims to remove them.
2. Select Add new claim.
3. For Name, enter: email
4. For Source attribute, search for and select user.mail
5. Select Save.

Step 9 – Add firstName claim

1. Select Add new claim.
2. For Name, enter: firstName
3. For Source attribute, search for and select user.givenname
4. Select Save.

Step 10 – Add lastName claim

1. Select Add new claim.
2. For Name, enter: lastName
3. For Source attribute, search for and select user.surname
4. Select Save.

Step 11 – Assign users to the application

1. In Microsoft Entra ID, go to Enterprise Applications.
2. Select the Calendly application you created.
3. Select 1. Assign users and groups (or similar).
4. Select Add user.
5. Select Users.
6. Search for your user.
7. Select the user.
8. Select Assign.

Start by assigning just yourself or a test user. You'll assign the rest of your team later.

Step 12 – Test the connection

1. Go back to Calendly.
2. Select Enable SSO for yourself.
3. Select Test connection.
4. Log in using your work credentials.

If you see your Calendly account, the connection works. If you get an error, check that all the values you copied match exactly.

Step 13 – Assign remaining users and enable SSO

Once you've verified that SSO works:

1. Go back to Microsoft Entra ID.
2. Assign all your remaining team members to the Calendly application.
3. Go back to Calendly.
4. Select Enforce SAML SSO for my organization.
5. Select Apply.

Once you enforce SSO, all users will be logged out. They'll need to use SSO to log back in.

Only your organization owner can still log in using their original login method by selecting Log in using another method on the login page.

Troubleshooting

If you run into issues during setup:

• Make sure all values are copied exactly as they appear
• Check that you've assigned your users to the application in Microsoft Entra ID
• Verify that your Microsoft Entra ID user claims are set up correctly

Contact Calendly support if you need additional assistance.