> For the complete documentation index, see [llms.txt](https://docs.fenixpyre.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.fenixpyre.com/fenixpyre-for-admins/admin-dashboard/identity-and-provisioning/saml-single-sign-on-sso-setup/set-up-saml-sso-with-azure.md).

# Set-up SAML SSO with Azure

1. Sign-in to your Azure admin portal
2. In the left menu bar, click on Microsoft Entra ID

<figure><img src="/files/ysOjZ53LxGTRbpQyRszL" alt=""><figcaption></figcaption></figure>

3. Click on **Enterprise applications** in the left menu bar
4. In the Enterprise applications page, click on **New application**
5. In the **Browse Microsoft Entra Gallery** page, click on **Create your own application**

<figure><img src="/files/khEdKEyxN4UM3bfNEpAs" alt=""><figcaption></figcaption></figure>

6. In the **Create your own application**,
   1. Enter a name for the application. For example **fp-saml-sso-application**
   2. Select **Integrate any other application you don't find in the gallery (Non-gallery)**

<figure><img src="/files/26aqZnRvdGzAjYhX5EAK" alt=""><figcaption></figcaption></figure>

7. Click on the **Create** button
8. In the newly created application page, select **Single sign-on** in the left menu bar

<figure><img src="/files/w2JhYCTUBuaMHKtTUkUF" alt=""><figcaption></figcaption></figure>

9. Select SAML in the **Select a single sign-on method**

<figure><img src="/files/L888kJWso6IEpRu32eUn" alt=""><figcaption></figcaption></figure>

10. In the **Set up Single Sign-On with SAML** page, click on the Edit icon under **Basic SAML configuration**

<figure><img src="/files/L9JVIJ3GLlaklkUapRpU" alt=""><figcaption></figcaption></figure>

11. On the configuration page, click on the **Add Identifier** button

<figure><img src="/files/fEcdgBaZXW1elEFi3Sl2" alt=""><figcaption></figcaption></figure>

12. Now you will need to get the following values from the Fenixpyre admin dashboard.
    1. Identifier (Entity ID)
    2. Reply URL (Assertion Consumer Service URL)
    3. Sign on URL
13. Sign in to the Fenixpyre admin dashboard
14. Click on Identity & Provisioning under Security in Settings (Left Navigation Menu)

<figure><img src="/files/dJJGeagGveCdqrgne1rz" alt=""><figcaption></figcaption></figure>

15. Switch to SAML SSO Tab

<figure><img src="/files/rygBTljTKNlO92qyHp8L" alt=""><figcaption></figcaption></figure>

16. Click on **Add new SAML SSO** and select **Setup Azure AD SAML SSO**

<figure><img src="/files/QyKXJFNzXtthKxZ47Fht" alt=""><figcaption></figcaption></figure>

17. You will be presented with a dialogue which contains the following values:
    1. Identifier (Entity ID)
    2. Reply URL (Assertion Consumer Service URL)
    3. Sign on URL

<figure><img src="/files/ccUnR3EH16opY5AKZODN" alt=""><figcaption></figcaption></figure>

18. Copy the **Identifier (Entity ID)**, **Reply URL (Assertion Consumer Service URL)**, and **Sign on URL** and paste it in the **Azure Basic SAML configuration** page like shown below.

<figure><img src="/files/neFXZ893SysmSCJCCUPa" alt=""><figcaption></figcaption></figure>

19. Click on the **Save** button, You will navigated back to the SSO landing page.

<figure><img src="/files/mhqnIl0Lh9KjAsejMUHF" alt=""><figcaption></figcaption></figure>

20. Click on the **Permissions** in the left menu bar and then click on **app registration**.
21. In the API permissions page, click on **Add a permission**
22. Add the following API permissions
    1. Microsoft Graph -> Delegated permissions -> User.Read
    2. Microsoft Graph -> Delegated permissions -> Directory.Read.All

{% embed url="<https://www.loom.com/share/433646d0cc57458aa1eda49c22f2ece1?sid=02d55527-387d-4d97-9134-acb3a7f1d650>" %}

23. Click on \*\*Grant admin consent \*\*
24. Go back to **Enterprise applications** -> find the **fp-saml-sso-application**, and then click on **Single sign-on**.
25. Download the Base64 certificate, and copy the **Login URL**

{% embed url="<https://www.loom.com/share/2af2d979ada7482d97a112567a858a0f?sid=41abea10-4dc7-48c6-9c80-bd5e3797a92a>" %}

26. Paste the **Login URL** in the **Sign-in URL** field on the Fenixpyre dashboard, and upload the Base64 certificate you downloaded to the Fenixpyre dashboard.

{% embed url="<https://www.loom.com/share/deccce5e2d8d4b1d9fac3b96dbf9c68d?sid=f7130a23-b3c6-4bbe-8d93-27a518017a5c>" %}

27. You will see a success dialogue box if the setup is successful.
28. Click on **Close** or **Logout and verify the connection** to verify the newly added SAML SSO.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.fenixpyre.com/fenixpyre-for-admins/admin-dashboard/identity-and-provisioning/saml-single-sign-on-sso-setup/set-up-saml-sso-with-azure.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
