> ## Documentation Index > Fetch the complete documentation index at: https://macstadiuminc-add-bazel-rbe-integration-di574.mintlify.site/llms.txt > Use this file to discover all available pages before exploring further. # Enable SAML SSO with Microsoft Entra ID > Set up SAML SSO for the MacStadium Portal with Microsoft Entra ID (Azure AD): create the enterprise app, configure SAML, and share metadata. ## About SAML SSO is a paid offering. Contact your account team through the [Customer Portal](https://portal.macstadium.com) for more information. MacStadium does not support IdP-initiated logins. After SSO is configured, all users must log in at [portal.macstadium.com/sso](https://portal.macstadium.com/sso) using the ID provided by the MacStadium team. You can also log in directly at [portal.macstadium.com](https://portal.macstadium.com/login). ## Overview SAML SSO with Microsoft Entra ID allows customers to: * Enable users to be automatically signed in to MacStadium using their Entra ID accounts. * Manage accounts in one central location: Microsoft Entra ID. ## Getting Started 1. Open **Entra ID admin**. 2. Navigate to **Enterprise applications**.\\ Azure Entra ID admin left sidebar with Enterprise applications option 3. Create a new application by clicking **New Application**.\\ Azure Enterprise applications list with New Application button 4. Create an application by clicking **Create your own application**.\\ Azure Browse gallery page with Create your own application button * Enter a name (for example **MacStadium-Portal**). * Select **Integrate any other application you don’t find in the gallery (Non-gallery).**\\ Azure Create your own application form with name field and non-gallery option selected 5. Click **Single sign-on**.\\ Azure enterprise app overview with Single sign-on option in sidebar 6. Select **SAML**.\\ Azure Single sign-on method selection with SAML option highlighted 7. Click **Edit** on the *Basic SAML settings.*\\ Azure SAML-based Sign-on page showing Basic SAML Configuration section with Edit button 8. Configure the SAML settings: * **Identifier (Entity ID):** `urn:amazon:cognito:sp:us-east-1_pusi8jHs1` * **Reply URL (Assertion Consumer Service URL):** `https://idp.macstadium.com/saml2/idpresponse` * **Logout URL (Optional):** `https://idp.macstadium.com/saml2/logout` * Click **Save** Azure Basic SAML Configuration with Entity ID, Reply URL, and Logout URL fields completed 9. Edit **Attributes & Claims** for your SAML app. The email field must be mapped to `user.mail` or login will fail.\\ Azure Attributes and Claims configuration with email mapped to user.mail Once configured properly, section 2 of your SAML app should look like the below screenshot.\\ Azure SAML app section 2 showing correctly configured Attributes and Claims 10. Once the attributes & claims are updated, please provide our support team with the app federation metadata URL. You can copy the federation metadata URL in section 3 of your SAML app, as shown in the below screenshot.\\ Azure SAML app section 3 showing App Federation Metadata URL to copy