---
title: Setting up SAML SSO with Azure
description: "Single sign-on lets your users sign in to Symbiant with their Microsoft work account instead of a separate password. This article shows how to set up the Symbiant app in Microsoft Entra ID (formerly Azure Active Directory). **Note:** Single sign-on…"
url: "https://support.symbiant.co.uk/kb/setting-up-saml-sso-with-azure/"
updated: "2026-10-30"
category: SAML Single Sign On
tags:
  - Accounts
  - Setup
  - User
---

# Setting up SAML SSO with Azure

Single sign-on lets your users sign in to Symbiant with their Microsoft work account instead of a separate password. This article shows how to set up the Symbiant app in Microsoft Entra ID (formerly Azure Active Directory).

**Note:** Single sign-on (SAML SSO) is a premium add-on. It is not included as standard in any Symbiant plan. Contact your account manager to add it.

**Critical:** With single sign-on, the sign-in email address is **case sensitive**. The email address on each Symbiant user must match the case in your directory exactly. For example, `James.Bond@yourcompany.com` and `james.bond@yourcompany.com` are treated as different people. Symbiant creates each user's single sign-on identity from their email address.

## What Symbiant Support Will Give You

When you order single sign-on, Symbiant Support sends you three values for your system. They look like this:

| Value | Example |
| --- | --- |
| Entity ID (Identifier) | `urn:amazon:cognito:sp:eu-west-2_example` |
| Reply URL (ACS URL) | `https://example-symbiant-app-login.auth.eu-west-2.amazoncognito.com/saml2/idpresponse` |
| Sign-on URL | `https://example.symbiant.cloud` |

## Creating the App

1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com/) or the [Azure portal](https://portal.azure.com/) as an administrator.
2. Go to **Enterprise applications** and click **New application**.

![New application](https://support.symbiant.co.uk/wp-content/uploads/2022/05/SAML-New-Appliaction.webp)

1. Click **Create your own application**.

![Create your own application](https://support.symbiant.co.uk/wp-content/uploads/2022/05/SAML-Create-Application.webp)

1. Name the app **Symbiant** and choose **Integrate any other application you don't find in the gallery (Non-gallery)**.

![Naming the app](https://support.symbiant.co.uk/wp-content/uploads/2022/05/SAML-App-Name.webp)

1. Click **Create**.

![Create](https://support.symbiant.co.uk/wp-content/uploads/2022/05/SAML-Create-Option.webp)

## Choosing SAML

1. Under **2. Set up single sign on**, click **Get started**.

![Get started with single sign-on](https://support.symbiant.co.uk/wp-content/uploads/2022/05/SAML-Get-Started.webp)

1. Click **SAML**.

![Choosing SAML](https://support.symbiant.co.uk/wp-content/uploads/2022/05/SAML-Option.webp)

## Entering the Basic SAML Configuration

1. Click the edit pencil on **Basic SAML Configuration**.

![Editing the basic configuration](https://support.symbiant.co.uk/wp-content/uploads/2022/05/SAML-Edit-Config.webp)

1. Delete any default values.
2. Enter the three values from Symbiant Support: the **Identifier (Entity ID)**, the **Reply URL** and the **Sign on URL**.
3. Click **Save**.

![The basic SAML configuration filled in](https://support.symbiant.co.uk/wp-content/uploads/2022/05/SAML-Basic-Config.webp)

## Setting the Unique User Identifier

1. Click the edit pencil on **Attributes & Claims**.

![Editing Attributes & Claims](https://support.symbiant.co.uk/wp-content/uploads/2022/05/SAML-Attributes.webp)

1. Click **Unique User Identifier**.

![The Unique User Identifier claim](https://support.symbiant.co.uk/wp-content/uploads/2022/05/SAML-Select-Unique-Attribute.webp)

1. Set **Source attribute** to `user.mail` and save.

![Setting the source attribute to user.mail](https://support.symbiant.co.uk/wp-content/uploads/2022/05/SAML-Attribute-Setup.webp)

## Adding a Custom Claim (Only If Support Asks)

1. Under **Attributes & Claims**, click **Add new claim**.

![Add new claim](https://support.symbiant.co.uk/wp-content/uploads/2022/05/SAML-New-Attribute.webp)

1. Enter the **Name** that Symbiant Support gave you.
2. Set **Source** to **Attribute**.
3. In **Source attribute**, enter the value Symbiant Support gave you, then click **Save**.

![A custom claim](https://support.symbiant.co.uk/wp-content/uploads/2022/05/SAML-Claim.webp)

## Giving Users Access

Assign the users or groups who should use Symbiant to the app (**Users and groups > Add user/group**). Anyone not assigned will see error AADSTS50105. See [SAML Azure Errors](https://support.symbiant.co.uk/kb/saml-azure-errors/).

## What to Send Back to Symbiant Support

Copy the app's **Federation Metadata URL** and send it to us in a [support ticket](https://support.symbiant.co.uk/submit-ticket/). We'll finish the set-up and let you know when single sign-on is ready.

Once it is ready, [turn on single sign-on for each user](https://support.symbiant.co.uk/kb/enabling-users-with-saml/).

![The App Federation Metadata URL](https://support.symbiant.co.uk/wp-content/uploads/2022/05/SAML-Meta.webp)