This page describes the entire setup process for using SSO / Provisioning with Microsoft Entra ID.

Customers who use provisioning

Subject to Provisioning

Provisioning includes the function to synchronize workers to Acall and the function to synchronize groups to Acall. Either or both can be used.

If you are using a group hierarchy, the hierarchy cannot be synchronized.

Please refer to "Can I synchronize the hierarchies of the groups in IdP?" for more information.

For provisioning of groups, please also see below.

• FAQ > Group Provisioning

Setup Flow

SSO / Provisioning Common Settings

1. Creating Microsoft Entra ID Enterprise Applications
2. Assigning apps to users and groups

Please refer to the help article below for details.

• [Entra ID] SSO / Provisioning Common Settings

SSO Settings

1. SSO configuration on Entra ID
2. Request to Acall to set up SSO
3. Send Reply URL (on Acall end)
4. Set Reply URL on Entra ID
5. SSO operation check

Please refer to the help article below for details.

• [Entra ID] SSO / Provisioning Settings

Provisioning Settings

1. Request to Acall to issue a secret token
2. Send secret token (on Acall end)
3. Provisioning setup on Entra ID
4. Provisioning operation check

Please refer to the help article below for details.

• [Entra ID] Provisioning Settings
• [Entra ID] Group Provisioning Settings

After Go-live

Renew SSO Certificate

SAML certificate used for SSO has an expiration date, and once it expires, you will not be able to log in to Acall.

You must create a new certificate and replace before it expires.

⚠️
Expiration date of the certificate must be managed by the customer. Acall does not manage or notify the date.
Reference：Add email notification addresses for certificate expiration

Please refer to the help article below for details.

• [Entra ID] Renew Certificate