LASSO supports Single Sign-On (SSO) using SAML. If your organization uses Microsoft Entra ID (formerly Azure AD), you can add LASSO as an enterprise application so your admins sign in with their existing Microsoft credentials. This article walks through the full setup.
Before you start
SSO is available for admins in your LASSO account only. It is not available for crew who use the LASSO mobile application.
Setup is a shared effort: you configure the app in Microsoft Entra, then the LASSO team completes the matching configuration on the LASSO side. You'll exchange URLs along the way.
Prerequisites
To add an enterprise application to your Microsoft Entra tenant, you need:
A Microsoft Entra user account.
One of the following roles: Global Administrator, Cloud Application Administrator, or Application Administrator.
Step 1: Add the enterprise application
Microsoft Entra ID includes a gallery of thousands of pre-integrated enterprise applications. This setup uses the Microsoft Entra SAML Toolkit application.
Sign in to your Microsoft Entra admin center (Azure AD).
Browse to Identity → Applications → Enterprise applications → All applications.
Select New application.
In the Search application field, enter Microsoft Entra SAML Toolkit and select it.
Enter the name LASSO SSO.
Click Create.
Step 2: Choose the SAML sign-on method
In the new LASSO SSO application, click Single sign-on under Manage, then select the SAML single sign-on method.
Step 3: Enter the Basic SAML Configuration
Click Edit on the Basic SAML Configuration section. The LASSO team will provide the exact URLs for each field — it is important to enter the URLs exactly as LASSO provides them.
Identifier (Entity ID): the URL provided by LASSO, e.g.
https://api.lasso.io/saml/<account>/azure/metadata/Reply URL (Assertion Consumer Service URL): the URL provided by LASSO, e.g.
https://api.lasso.io/saml/<account>/azure/acs/Sign on URL: the URL provided by LASSO, e.g.
https://api.lasso.io/saml/<account>/azure/sso/
Step 4: Verify Attributes & Claims
You should be able to leave the defaults in the Attributes & Claims area. Verify your settings match the example below.
Step 5: Send your metadata URL to LASSO
In the SAML Certificates section, copy the App Federation Metadata Url and email it to [email protected]. LASSO uses this URL to complete the SSO configuration on our side.
The URL will look similar to:
https://login.microsoftonline.com/<tenant-id>/federationmetadata/2007-06/federationmetadata.xml?appid=<app-id>
LASSO support will let you know once setup is complete on the LASSO side.
Step 6: Assign users
After LASSO has configured the SAML settings on your account, you can add users to the enterprise application.
Note: SSO can only be set up for admins in your LASSO account — it is not available for crew who use the LASSO mobile application. For each user who needs SSO access, notify LASSO support and we will configure that user for SSO on your account.
Optional: Add a logo
You can upload a custom logo for the enterprise application. Click Properties under Manage, then upload a new icon. This is the logo users see on My Apps, in the Office 365 app launcher, and in the application gallery.
Logos must be exactly 215 × 215px and in PNG format.
We recommend a solid-color background with no transparency so it displays well.
A LASSO logo is available here: https://public.lasso.io/_lib/logo-215x215.png
Need help?
If you have any questions during setup, contact [email protected].