> ## Documentation Index
> Fetch the complete documentation index at: https://kb.aampe.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Microsoft Entra ID (formerly Azure AD) SAML SSO

> Here we show you how to set up your own custom SAML application for Microsoft Entra ID SAML

## Create application

From your Azure Admin console, click **Enterprise applications** from the left navigation menu.

<img src="https://mintcdn.com/aameo/nTJJr7c-2zWPTL1i/images/sso_microsoft_entraid1.png?fit=max&auto=format&n=nTJJr7c-2zWPTL1i&q=85&s=d56c6954680a38f941bf959fc4993e6e" alt="Sso Microsoft Entraid1 Pn" width="3184" height="1709" data-path="images/sso_microsoft_entraid1.png" />

If your application is already created, choose it from the list and move to the section [Configure Application](#configure-application).

If you haven't created a SAML application, click **New application** from the top to create a new application.

<img src="https://mintcdn.com/aameo/nTJJr7c-2zWPTL1i/images/sso_microsoft_entraid2.png?fit=max&auto=format&n=nTJJr7c-2zWPTL1i&q=85&s=ee854b0b4bc5f7b58368544d1c33b5a4" alt="Sso Microsoft Entraid2 Pn" width="3184" height="1707" data-path="images/sso_microsoft_entraid2.png" />

From the next screen, click **Create your own application**. Give your application a **Name** and click **Create**.

<img src="https://mintcdn.com/aameo/nTJJr7c-2zWPTL1i/images/sso_microsoft_entraid3.png?fit=max&auto=format&n=nTJJr7c-2zWPTL1i&q=85&s=d902eb103a2bb156437cdcf14f4e63fb" alt="Sso 3 Pn" width="3184" height="1710" data-path="images/sso_microsoft_entraid3.png" />

## Configure application

Select **Single Sign On** from the **Manage** section of your app and then **SAML**.

<img src="https://mintcdn.com/aameo/nTJJr7c-2zWPTL1i/images/sso_microsoft_entraid4.png?fit=max&auto=format&n=nTJJr7c-2zWPTL1i&q=85&s=2b3a0407f4bea1c89a2a25140a3f63de" alt="Sso 4 Pn" width="3184" height="1712" data-path="images/sso_microsoft_entraid4.png" />

Click **Edit** on the **Basic SAML Configuration** section.

<img src="https://mintcdn.com/aameo/nTJJr7c-2zWPTL1i/images/sso_microsoft_etraid5.png?fit=max&auto=format&n=nTJJr7c-2zWPTL1i&q=85&s=b9577f4c5fdcfdab3e6dccab754d2f7d" alt="Sso Microsoft Etraid5 Pn" width="3184" height="1707" data-path="images/sso_microsoft_etraid5.png" />

Enter the following values in the **Basic SAML Configuration** section on the next screen:

* **Identifier (Entity ID)**
* **Reply URL (Assertion Consumer Service URL)**

Replace the values with the ones you have received from Aampe.

Click **Save** to save your changes.

<img src="https://mintcdn.com/aameo/nTJJr7c-2zWPTL1i/images/sso_microsoft_entraid6.png?fit=max&auto=format&n=nTJJr7c-2zWPTL1i&q=85&s=283af08c410aeb3af2b5cbf161ed2a9c" alt="Sso 6 Pn" width="3184" height="1703" data-path="images/sso_microsoft_entraid6.png" />

## Attribute mapping

Click **Edit** on the **Attributes & Claims** section.

<img src="https://mintcdn.com/aameo/nTJJr7c-2zWPTL1i/images/sso_microsoft_entraid7.png?fit=max&auto=format&n=nTJJr7c-2zWPTL1i&q=85&s=89f3401bb4065a307710ba282891478a" alt="Sso 7 Pn" width="3184" height="1710" data-path="images/sso_microsoft_entraid7.png" />

You have to configure the following attributes under the **Attributes & Claims** section:

| Name                                                                 | Value                    |
| :------------------------------------------------------------------- | :----------------------- |
| `http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress` | `user.mail`              |
| `http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname`    | `user.givenname`         |
| `http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name`         | `user.userprincipalname` |
| `http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname`      | `user.surname`           |

See the screenshot below.

<img src="https://mintcdn.com/aameo/nTJJr7c-2zWPTL1i/images/sso_microsoft_entraid8.png?fit=max&auto=format&n=nTJJr7c-2zWPTL1i&q=85&s=9f6c831fa6b7f188561a604be171ccd7" alt="Sso 8 Pn" width="3184" height="1628" data-path="images/sso_microsoft_entraid8.png" />

Go to the **SAML Signing Certificate** section and download the **Federation Metadata XML**.

<img src="https://mintcdn.com/aameo/nTJJr7c-2zWPTL1i/images/sso_microsoft_entraid_9.png?fit=max&auto=format&n=nTJJr7c-2zWPTL1i&q=85&s=47d22ec4a9ce81063a9cf4a8e9658ff3" alt="Sso 9 Pn" width="3184" height="1709" data-path="images/sso_microsoft_entraid_9.png" />

## Next steps

You've successfully configured your custom SAML application for Microsoft Entra ID SAML. At this stage, you can assign users to your application and start using it.