> ## Documentation Index
> Fetch the complete documentation index at: https://docs.softr.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Microsoft Azure SAML Single Sign-on

> Setting up SAML single sign-on for Softr with Microsoft Azure.

[Microsoft Azure](https://azure.microsoft.com/en-us/) is a popular cloud computing platform that can be used to set up [SAML single sign-on](/add-and-manage-users/pxnkp9H3qyEVMF6XUceqnj/saml-single-sign-on/j9hELMUfGtAGqoNzejgoif) using its directory service called **Active Directory**. Let’s see how you can do that for your Softr app to let your users sign in with their Azure credentials.

## Creating an application

First of all, you need to create an application. To do that, navigate to **Enterprise Applications** on your Azure dashboard.

<Frame caption="Enterprise applications">
  <img src="https://mintcdn.com/softr-2b8a27e1/XiQC0e0h2Y_rNjKb/add-and-manage-users/images/microsoft-azure-saml-single-sign-on/image1.png?fit=max&auto=format&n=XiQC0e0h2Y_rNjKb&q=85&s=943fa714ed2b35d420bc07531f4c5aec" alt="Enterprise applications" width="2504" height="1236" data-path="add-and-manage-users/images/microsoft-azure-saml-single-sign-on/image1.png" />
</Frame>

Then, hit **New Application**.

<Frame caption="New application">
  <img src="https://mintcdn.com/softr-2b8a27e1/XiQC0e0h2Y_rNjKb/add-and-manage-users/images/microsoft-azure-saml-single-sign-on/image2.png?fit=max&auto=format&n=XiQC0e0h2Y_rNjKb&q=85&s=277a1be99ac0929d47b9d4e3c5525b86" alt="New application" width="1830" height="948" data-path="add-and-manage-users/images/microsoft-azure-saml-single-sign-on/image2.png" />
</Frame>

Next, in the app gallery, search for **Azure AD SAML Toolkit** and select the app.

<Frame caption="Locating “Azure AD SAML Toolkit”">
  <img src="https://mintcdn.com/softr-2b8a27e1/XiQC0e0h2Y_rNjKb/add-and-manage-users/images/microsoft-azure-saml-single-sign-on/image3.png?fit=max&auto=format&n=XiQC0e0h2Y_rNjKb&q=85&s=cd20fa7aa1fcd349448ecfac48fadf9a" alt="Locating “Azure AD SAML Toolkit”" width="2172" height="1074" data-path="add-and-manage-users/images/microsoft-azure-saml-single-sign-on/image3.png" />
</Frame>

In the sidebar that opens next, specify a name for your app and hit **Create**.

<Frame caption="Creating the application">
  <img src="https://mintcdn.com/softr-2b8a27e1/XiQC0e0h2Y_rNjKb/add-and-manage-users/images/microsoft-azure-saml-single-sign-on/image4.png?fit=max&auto=format&n=XiQC0e0h2Y_rNjKb&q=85&s=acee56437740fb4eaa12beae62ef54cb" alt="Creating the application" width="1266" height="1338" data-path="add-and-manage-users/images/microsoft-azure-saml-single-sign-on/image4.png" />
</Frame>

Now that you have your application, you need to set up single sign-on for it, which we’ll discuss next.

## Getting started with single sign-on setup

On the **Overview** screen of the application that you just created, click **Get started** under **Set up single sign on**.

<Frame caption="Getting started with single sign-on setup">
  <img src="https://mintcdn.com/softr-2b8a27e1/XiQC0e0h2Y_rNjKb/add-and-manage-users/images/microsoft-azure-saml-single-sign-on/image5.png?fit=max&auto=format&n=XiQC0e0h2Y_rNjKb&q=85&s=b57033a734d8e8b82b2ecb76a3604d95" alt="Getting started with single sign-on setup" width="2802" height="1270" data-path="add-and-manage-users/images/microsoft-azure-saml-single-sign-on/image5.png" />
</Frame>

In the next screen, select the **SAML** method.

<Frame caption="Selecting the single sign-on method">
  <img src="https://mintcdn.com/softr-2b8a27e1/XiQC0e0h2Y_rNjKb/add-and-manage-users/images/microsoft-azure-saml-single-sign-on/image6.png?fit=max&auto=format&n=XiQC0e0h2Y_rNjKb&q=85&s=359cb455f0b9fa0026961eeaa47ec38d" alt="Selecting the single sign-on method" width="2792" height="1002" data-path="add-and-manage-users/images/microsoft-azure-saml-single-sign-on/image6.png" />
</Frame>

You’ll be taken to the configuration page, where you need to set up the required parameters in order to integrate the single sign-on with your Softr app.

## Basic SAML configuration

The first step of the setup is **Basic SAML Configuration**. Click **Edit** in the upper right corner to enter the configuration screen.

<Frame caption="Basic SAML configuration">
  <img src="https://mintcdn.com/softr-2b8a27e1/XiQC0e0h2Y_rNjKb/add-and-manage-users/images/microsoft-azure-saml-single-sign-on/image7.png?fit=max&auto=format&n=XiQC0e0h2Y_rNjKb&q=85&s=ca30047a612178e6636ea7f79db891f2" alt="Basic SAML configuration" width="2334" height="1182" data-path="add-and-manage-users/images/microsoft-azure-saml-single-sign-on/image7.png" />
</Frame>

First comes the **Identifier (Entity ID)** property, which can be found under **Audience URL** in your Softr app’s **Settings ⇒ SAML Settings**. Just copy the value and paste it in Azure.

<Frame caption="Adding Entity ID">
  <img src="https://mintcdn.com/softr-2b8a27e1/XiQC0e0h2Y_rNjKb/add-and-manage-users/images/microsoft-azure-saml-single-sign-on/image8.png?fit=max&auto=format&n=XiQC0e0h2Y_rNjKb&q=85&s=e9e4d0443f7df33a8d73c97e6b20ad36" alt="Adding Entity ID" width="1604" height="696" data-path="add-and-manage-users/images/microsoft-azure-saml-single-sign-on/image8.png" />
</Frame>

Next, you need to add the **Reply URL (ACS URL)**, which can be located under **ACS URL** in your Softr app’s SAML settings. **The Index** field can be left empty.

<Frame caption="Adding ACS URL">
  <img src="https://mintcdn.com/softr-2b8a27e1/XiQC0e0h2Y_rNjKb/add-and-manage-users/images/microsoft-azure-saml-single-sign-on/image9.png?fit=max&auto=format&n=XiQC0e0h2Y_rNjKb&q=85&s=285669e049cee2b7acde8711d4468419" alt="Adding ACS URL" width="1704" height="878" data-path="add-and-manage-users/images/microsoft-azure-saml-single-sign-on/image9.png" />
</Frame>

Lastly, you have the **Sign on URL**, which should have the URL of the page where your SSO login form is located.

<Frame caption="Softr application page with an SSO sign-in block">
  <img src="https://mintcdn.com/softr-2b8a27e1/XiQC0e0h2Y_rNjKb/add-and-manage-users/images/microsoft-azure-saml-single-sign-on/image10.png?fit=max&auto=format&n=XiQC0e0h2Y_rNjKb&q=85&s=cc6c8b8f6fc7b011767dee241b4a5d32" alt="Softr application page with an SSO sign-in block" width="2328" height="1280" data-path="add-and-manage-users/images/microsoft-azure-saml-single-sign-on/image10.png" />
</Frame>

You need to copy the URL and paste it under **Sign on URL** in Azure.

<Frame caption="Adding the Sign on URL">
  <img src="https://mintcdn.com/softr-2b8a27e1/XiQC0e0h2Y_rNjKb/add-and-manage-users/images/microsoft-azure-saml-single-sign-on/image11.png?fit=max&auto=format&n=XiQC0e0h2Y_rNjKb&q=85&s=8043da787cccddca9d8875c2cbf8b1b9" alt="Adding the Sign on URL" width="1674" height="826" data-path="add-and-manage-users/images/microsoft-azure-saml-single-sign-on/image11.png" />
</Frame>

To finalize the setup, hit **Save** and close the sidebar.

## Attributes & Claims

In this step, you need to copy the **First Name**, **Last Name**, and **Email** keys from Azure and add them into your Softr app’s single sign-on settings.

<Frame caption="Getting the keys from Azure">
  <img src="https://mintcdn.com/softr-2b8a27e1/XiQC0e0h2Y_rNjKb/add-and-manage-users/images/microsoft-azure-saml-single-sign-on/image12.png?fit=max&auto=format&n=XiQC0e0h2Y_rNjKb&q=85&s=1c61b3fed83fb2e019e56c5f3ddfba70" alt="Getting the keys from Azure" width="1582" height="830" data-path="add-and-manage-users/images/microsoft-azure-saml-single-sign-on/image12.png" />
</Frame>

The keys should be applied as shown in the following screenshot.

<Frame caption="Applying keys in Softr">
  <img src="https://mintcdn.com/softr-2b8a27e1/XiQC0e0h2Y_rNjKb/add-and-manage-users/images/microsoft-azure-saml-single-sign-on/image13.png?fit=max&auto=format&n=XiQC0e0h2Y_rNjKb&q=85&s=d606f052dd08abc439da08071e408d80" alt="Applying keys in Softr" width="828" height="840" data-path="add-and-manage-users/images/microsoft-azure-saml-single-sign-on/image13.png" />
</Frame>

## SAML Certificates

In this step, you need to download the **Metadata XML file** in Azure.

<Frame caption="Metadata XML Download">
  <img src="https://mintcdn.com/softr-2b8a27e1/XiQC0e0h2Y_rNjKb/add-and-manage-users/images/microsoft-azure-saml-single-sign-on/image14.png?fit=max&auto=format&n=XiQC0e0h2Y_rNjKb&q=85&s=fc6de11a0324f1eb3199b31c41382a94" alt="Metadata XML Download" width="1684" height="880" data-path="add-and-manage-users/images/microsoft-azure-saml-single-sign-on/image14.png" />
</Frame>

Next, open the file with any suitable editor, copy the entire content of the file, and add it to your Softr app under **SAML Settings**.

<Frame caption="Adding metadata XML to Softr">
  <img src="https://mintcdn.com/softr-2b8a27e1/XiQC0e0h2Y_rNjKb/add-and-manage-users/images/microsoft-azure-saml-single-sign-on/image15.png?fit=max&auto=format&n=XiQC0e0h2Y_rNjKb&q=85&s=e7a0851e5b401dbe9f1a2fb9886b25f0" alt="Adding metadata XML to Softr" width="806" height="764" data-path="add-and-manage-users/images/microsoft-azure-saml-single-sign-on/image15.png" />
</Frame>

And you’re almost done. There’s one last step remaining, which we’ll discuss next.

## Assigning users to an application and testing

Now, your users should be able to log into your Softr app with their Active Directory credentials. **Note, that the user needs to be assigned to your Azure application to be able to access it.** To assign a user, you need to navigate to the **Users and groups** sections of your application and add that user.

The following gif shows the process of assigning a user to an application.

<Frame caption="Assigning a user to your application">
  <img src="https://mintcdn.com/softr-2b8a27e1/XiQC0e0h2Y_rNjKb/add-and-manage-users/images/microsoft-azure-saml-single-sign-on/image16.gif?s=3a6bfa9b6d99ef2b2c2635b1bf044a8c" alt="Assigning a user to your application" width="2876" height="1412" data-path="add-and-manage-users/images/microsoft-azure-saml-single-sign-on/image16.gif" />
</Frame>

The assigned user should now be able to log into your Softr app through single sign-on.

<Frame caption="Signing in with Active Directory credentials">
  <img src="https://mintcdn.com/softr-2b8a27e1/XiQC0e0h2Y_rNjKb/add-and-manage-users/images/microsoft-azure-saml-single-sign-on/image17.gif?s=0302ce158db82bda3e5234cab23e0ab4" alt="Signing in with Active Directory credentials" width="2876" height="1412" data-path="add-and-manage-users/images/microsoft-azure-saml-single-sign-on/image17.gif" />
</Frame>
