Azure is a SAML identity provider that will authenticate your Lattice users trying to sign in. By setting up Lattice for SSO within your Azure Active Directory, your users will no longer need to remember an extra password to sign into Lattice, and you can quickly remove their access to Lattice from a centralized control panel. Find a list of other SAML providers Lattice integrates here: "Adding SSO to Lattice".
For Microsoft's detailed tutorial for setting up Azure AD SSO integration with Lattice, read Lattice Tutorial.
Note: User emails in Azure and Lattice should match to ensure users can sign in via SSO.
Add Lattice from the Azure gallery
Step 1: Sign in to your Azure portal as an Admin
Step 2: On the left navigation pane, select the Azure Active Directory service > Enterprise Applications > All applications > Select New application
Step 3: In the Browse Azure AD Gallery section, type Lattice in the search box.
Step 4: Select Lattice from results panel and then add the app. Wait a few seconds while the app is added to your tenant.
Configure SSO for the Lattice app
Step 1: Within the Manage section of the Lattice app, enter the Single sign-on pane.
Step 2: Select SAML as the single sign-on method. 
Step 3: Under Basic SAML Configuration, select Edit.
Step 4: Add the Identifier (Entity ID) and Reply URL (Assertion Consumer Service URL) with the following:
ACS URL: https://router.latticehq.com/sso/[subdomain]/acs
Entity ID: https://router.latticehq.com/sso/[subdomain]/metadata
Where "[subdomain]" is your Lattice subdomain. For example, if your organization's Lattice URL is "https://bigco.latticehq.com", "bigco" would be your subdomain and your ACS URL would be: https://router.latticehq.com/sso/bigco/acs
Note: Sign on URL can be left blank.
Add SSO XML metadata to Lattice
Step 1: In Azure, navigate to Home > Enterprise Applications > Lattice > SAML Signing Certificate > Download Federation Metadata XML.
Step 2: Open the Federation Metadata XML file and copy its contents.
Step 3: In Lattice, navigate to Admin > Platform > Settings > Single sign-on settings.
Step 4: Under XML metadata, paste the Federation Metadata XML.
Step 5: Select Save.
Assign users to the Lattice App
Step 1: Enter the Azure AD portal and select "Enterprise applications." Find the Lattice app previously created.
Step 2: Within the left navigation menu, select "User and Groups" and click "Add user."
Step 3: Select the "Assign" button at the bottom of the pane.
