---
title: "Configure SAML in Entra ID"
slug: "config-saml-entra-id"
updated: 2024-12-13T19:34:19Z
published: 2024-12-13T19:34:19Z
canonical: "docs.axiad.com/config-saml-entra-id"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.axiad.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Configure SAML in Entra ID

1. Sign into [Entra ID](https://aad.portal.azure.com/) as a Global administrator.
2. Select **Enterprise applications** from the left side menu.
3. Select **+ New application**.
4. In the search box, type **axiad**.
5. Select the Axiad Conductor application from the search results.
6. Optionally, change the **Name** of the application.

> [!NOTE]
> Note
> 
> The name may be visible to users in the Microsoft My Apps portal.

1. Click **Create**. Once the new enterprise application is created, you are automatically redirected to it.
2. Select **Users and groups**.
3. Click **+ Add user/group** and add the users or groups you want to grant access to Axiad Conductor.

> [!TIP]
> Tip
> 
> - During this step, we recommend creating an Entra ID group called **Axiad Conductor Users** and add those users that you want to use Axiad Conductor to this group.
> - If you want to allow all of your users access to Axiad Conductor, then navigate to the **Properties** window and select **No** for the **Assignment required?** setting.

1. Once your groups/users have been added, select **Single sign-on**.
2. Select **SAML**.
3. On **1 Basic SAML Configuration**, click **Edit**.
4. In the **Identifier (Entity ID)** section, click **Add identifier** and enter the following URL:

```Identity
https://access-<tenantName>.<platform>.axiadids.net/auth/realms/master
```
5. In the **Reply URL (Assertion Consumer Service URL)**, click **Add reply URL** and enter the following URL:

```Reply
https://access-user-<tenantName>.<platform>.axiadids.net/auth/realms/master/broker/saml/endpoint
```

NOTE

This URL should be checked as Default.
6. Click **Add reply URL** again and enter the following URL:

```Reply
https://access-<tenantName>.<platform>.axiadids.net/auth/realms/master/broker/saml/endpoint
```
7. In the **Sign on URL**, enter the following URL:

```Sign
https://portal-<tenantName>.<platform>.axiadids.net
```

When finished with the URL entries, your screen should look like the following example:

![scr_basic_saml_config](https://cdn.document360.io/eaa8d9cb-3eef-4690-8447-5bcaa4f4afb2/Images/Documentation/scr_basic_saml_config.png)
8. At the top of the page, click **Save**.
9. Close the **Basic SAML Configuration** window.

NOTE

If prompted to Test single sign-on, select **No, I'll test later**.
10. In **3 SAML Certificates**, click **Download** next to **Federation Metadata XML** to download an XML file to your computer.
11. Provide this XML file to your Axiad support contact.
  1. They will use this file to complete the SAML configuration in your Axiad Conductor tenant and inform you when you can move on to the SCIM configuration steps.