> ## Documentation Index
> Fetch the complete documentation index at: https://docs.datazone.co/llms.txt
> Use this file to discover all available pages before exploring further.

# Azure AD (Entra ID) SAML Setup

> Configure SAML authentication with Microsoft Azure Active Directory

<Frame>
  <img src="https://mintcdn.com/datazone/y2BC3_28XQ-fhP6A/images/azure_ad.png?fit=max&auto=format&n=y2BC3_28XQ-fhP6A&q=85&s=fc9ac53767793d373f1acace3df1ae0a" alt="azure-ad" width="640" height="190" data-path="images/azure_ad.png" />
</Frame>

## Prerequisites

* Administrator access to the [Azure Portal](https://portal.azure.com)
* Your Datazone instance domain (e.g., `app.datazone.co`)

## Configuration Steps

### 1. Access Azure Portal

Log into the [Azure Portal](https://portal.azure.com) with administrator privileges.

### 2. Create a New Enterprise Application

Navigate to **Enterprise applications** and click **New application**.

<Frame>
  <img src="https://mintcdn.com/datazone/QCj8aexjRlaYEYYd/images/light/saml-auth/saml-azure-1.png?fit=max&auto=format&n=QCj8aexjRlaYEYYd&q=85&s=e4a6f7be79e8b79c9d8cb11f972b226b" alt="saml-azure-1" width="1771" height="870" data-path="images/light/saml-auth/saml-azure-1.png" />
</Frame>

### 3. Create Custom Application

Select **Create your own application**, provide a name (e.g., "Datazone SSO"), and choose **Integrate any other application you don't find in the gallery (Non-gallery)**.

<Frame>
  <img src="https://mintcdn.com/datazone/QCj8aexjRlaYEYYd/images/light/saml-auth/saml-azure-2.png?fit=max&auto=format&n=QCj8aexjRlaYEYYd&q=85&s=17ab0d4b2c21b54be942c4bccb9441b9" alt="saml-azure-2" width="1419" height="748" data-path="images/light/saml-auth/saml-azure-2.png" />
</Frame>

### 4. Configure SAML Sign-On

In the application overview, go to **Single sign-on** and select **SAML** as the sign-on method.

<Frame>
  <img src="https://mintcdn.com/datazone/QCj8aexjRlaYEYYd/images/light/saml-auth/saml-azure-3.png?fit=max&auto=format&n=QCj8aexjRlaYEYYd&q=85&s=b0146f3ac64abe233e64c9ab143beff9" alt="saml-azure-3" width="1790" height="867" data-path="images/light/saml-auth/saml-azure-3.png" />
</Frame>

### 5. Configure Basic SAML Settings

In the **Basic SAML Configuration** section, click **Edit** and set the following parameters:

* **Identifier (Entity ID)**: `https://YOUR_DATAZONE_DOMAIN/api/v1/auth/saml/acs`
* **Reply URL (Assertion Consumer Service URL)**: `https://YOUR_DATAZONE_DOMAIN/api/v1/auth/saml/acs`

<Note>
  Replace `YOUR_DATAZONE_DOMAIN` with your actual Datazone instance domain.
</Note>

Save the configuration.

### 6. Collect Azure AD Configuration Details

From the **SAML Signing Certificate** section, gather the following information:

* **Login URL**: Found in the SAML configuration
* **Azure AD Identifier**: Found in the SAML configuration
* **Certificate (Base64)**: Download the certificate

<Frame>
  <img src="https://mintcdn.com/datazone/QCj8aexjRlaYEYYd/images/light/saml-auth/saml-azure-4.png?fit=max&auto=format&n=QCj8aexjRlaYEYYd&q=85&s=bc1cc273c8f2e3e428310c6b2fa3a3b0" alt="saml-azure-4" width="1091" height="1140" data-path="images/light/saml-auth/saml-azure-4.png" />
</Frame>

### 7. Configure User Attributes (Optional)

You can assign users or groups to the application in the **Users and groups** section. Ensure that the `email` attribute is mapped correctly for user identification.

<Frame>
  <img src="https://mintcdn.com/datazone/QCj8aexjRlaYEYYd/images/light/saml-auth/saml-azure-5.png?fit=max&auto=format&n=QCj8aexjRlaYEYYd&q=85&s=0b6e5a2d7bbed7791d2d1d5bb1c8b5ce" alt="saml-azure-5" width="2113" height="768" data-path="images/light/saml-auth/saml-azure-5.png" />
</Frame>

### 8. Enter Configuration in Datazone

Finally, enter the collected information into the Datazone SAML configuration settings as described in the [SAML Overview](overview) guide:

* **Entity ID (Issuer)**: Use the **Azure AD Identifier** from Azure
* **SSO URL**: Use the **Login URL** from Azure
* **Certificate**: Upload the downloaded **Certificate (Base64)**

<Frame>
  <img src="https://mintcdn.com/datazone/QCj8aexjRlaYEYYd/images/light/saml-auth/saml-azure-6.png?fit=max&auto=format&n=QCj8aexjRlaYEYYd&q=85&s=708cbc75b3fef2ef2e2ca1c0368eb06e" alt="saml-azure-6" width="1368" height="815" data-path="images/light/saml-auth/saml-azure-6.png" />
</Frame>

## Testing Your Configuration

After completing the setup:

1. Navigate to your Datazone login page
2. Click on the SSO/SAML login option
3. You should be redirected to Microsoft for authentication
4. Upon successful authentication, you'll be redirected back to Datazone

<Info>
  If you encounter any issues during setup, refer to the [SAML troubleshooting
  guide](overview#troubleshooting) or contact support at [support@datazone.co](mailto:support@datazone.co)
</Info>