---
title: SSO / SAML
slug: using-fusion-signage/sso-saml
docTags: 
createdAt: 2026-06-13T12:10:06.658Z
---

**Please note: **this is a Pro Licence feature.

## SSO / SAML

Here’s how to set up SAML authentication between Fusion Signage and Azure Active Directory.

**Pre-requisites**

- Pro Licence account.
- An enterprise app that has been created in Active Directory and is setup to use SAML for SSO.
- Users are present in both systems with the same email address.

### Enabling this function

Please contact our friendly support team at <u>**[support@fusionsignage.com.au](mailto\:support@fusionsignage.com.au)**</u> and we can turn this feature on for you.&#x20;

### Fusion Signage SP metadata

- Log into your Fusion Signage account at <u>**[https://app.fusionsignage.com.au/](https://app.fusionsignage.com.au/)**</u>**.**
- Navigate to Settings > Company Settings > Security Configuration.
- Here you will find all of the relevant information you will need to connect Fusion Signage to your Azure Active Directory.
- Scroll to the bottom of the page and click the button labelled Download SP Metadata and save that file to your computer.&#x20;

### Enterprise app

- Navigate to Single Sign-On
- Click Upload Metadata File and upload the file you just downloaded
- Copy login URL from Enterprise App and paste into login URL within the Fusion Signage portal under Settings > Company Settings > Security Configuration. URL: <u>**[https://app.fusionsignage.com.au/login](https://app.fusionsignage.com.au/login)**</u>
- Copy redirect URL from Fusion Signage CMS and paste into Relay State: <u>**[https://app.fusionsignage.com.au/](https://app.fusionsignage.com.au/)**</u>
- Click Save.

**Certificate expiries**
Microsoft Entra ID (Azure AD)’s SAML‑based Single Sign‑On certificates are self‑signed and have a fixed lifetime – three years from the date of creation.

You cannot extend an existing certificate’s expiration. Instead, you have to:

- Generate a new SAML certificate (valid up to 3 years ahead).
  - Go to Enterprise apps > Fusion Signage > Single Sign-On > SAML Certificates > Edit > New Certificate.
  - Set the new certificate as 'Active'.
  - Mark the old one 'Inactive'.

## Fusion Signage CMS

- Navigate back to your Fusion Signage portal at <u>**[https://app.fusionsignage.com.au](https://app.fusionsignage.com.au/)**</u>**.**
- Copy login URL from Enterprise App and paste into login URL within the Fusion Signage portal under Settings > Security.
- Copy Azure AD Identifier from Enterprise App and paste into Identifier.
- Copy App Federation Metadata Url from Enterprise App and paste into IdP Manifest URL.
- Click Save SSO Config.

## Login

- Navigate to the Fusion Signage login page at <u>**[https://app.fusionsignage.com.au/](https://app.fusionsignage.com.au/)**</u>**.**
- Click log in with SSO from the login page.
- Enter your federated email address and click Login.

***

## Looking for something else?

We can’t wait to hear about it. Reach out to our sunshiney support and we'll be in touch in a flash.

:::CtaButton{label="Contact us" externalHref="https://www.fusionsignage.com.au/contact-us/" openInNewTab="true"}

:::