> For the complete documentation index, see [llms.txt](https://docs.siit.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.siit.io/guides/workspace/saml-entra-id.md).

# Set up SSO with Microsoft Entra ID

✅ Follow these steps to quickly set up Microsoft Entra ID as the Identity Provider (IdP) for SSO with Siit.

**1️⃣ Log in to the Siit Admin Dashboard**

1. Open your browser and log in to the **Siit Admin Dashboard**.
2. Navigate to **Settings** > **Security**.

**2️⃣ Select Microsoft Entra ID as the SAML Provider**

1. Under the **SAML Settings** section, locate the **SAML Provider** dropdown.
2. Select **Microsoft Entra ID** from the dropdown list.

**3️⃣ Note the Required Details**

1. Copy the following values from the Siit Admin Dashboard:

* **SSO URL (Consumer URL)**
* **Audience URI (SP Entity ID)**

**4️⃣ Configure the Application in Microsoft Entra ID**

1. Log in to the **Microsoft Entra Admin Center** (formerly Azure AD).
2. Go to **Enterprise Applications** > **New Application**.
3. Choose **Create your own application** and name it (e.g., “Siit SSO”).
4. Select **Single sign-on** and choose **SAML**.
5. Configure the SAML-based Single Sign-On settings:

* **Identifier (Entity ID)**: Paste the **Audience URI (SP Entity ID)** copied from Step 3.
* **Reply URL (Assertion Consumer Service URL)**: Paste the **SSO URL (Consumer URL)** copied from Step 3.

6. Save your changes.

**5️⃣ Assign Users or Groups to the Application**

1. Still in the Microsoft Entra Admin Center, go to the **Users and Groups** section of the newly created application.
2. Click **Add user/group**.
3. Select the users or groups that should have access to Siit via SSO.
4. Save your changes.

**6️⃣ Retrieve and Paste the Metadata URL**

1. In the **SAML setup page** of the application in Microsoft Entra ID, copy the **App Federation Metadata URL**. Ithas the following format:

   *<https://login.microsoftonline.com/{some-id}/federationmetadata/2007-06/federationmetadata.xml?appid={app-id}>*
2. Return to the **Siit Admin Dashboard** and paste the **App Federation Metadata URL** into the **Metadata URL** field under **SAML Settings**.
3. Click **Save**.

**7️⃣ Test SSO**

1. On the Siit Admin login page, click on **Sign in with SSO**.
2. Enter your email and click **Connect**.
3. After your login credentials are authenticated, you're automatically redirected to Siit.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.siit.io/guides/workspace/saml-entra-id.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.