{"templateId":"markdown","sharedDataIds":{"sidebar":"sidebar-sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":[]},"redocly_category":"Products","product_name":"Control Panel","type":"markdown"},"seo":{"title":"Configuring Microsoft Entra ID SAML 2 0 for SSO","description":"Treasure Data Product Documentation · Collect and Unify · Segment and Activate · Experiment and Analyze · Decisioning Automate with AI Scale and Trust.","siteUrl":"https://docs.treasuredata.com","lang":"en-US","llmstxt":{"hide":false,"sections":[{"title":"Table of contents","includeFiles":["**/*"],"excludeFiles":[]}],"excludeFiles":[]}},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"configuring-microsoft-entra-id-saml-2-0-for-sso","__idx":0},"children":["Configuring Microsoft Entra ID SAML 2 0 for SSO"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["You’ll need to configure settings in Microsoft Entra ID (formerly Azure AD) to finalize the setup for Identity Federation."]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Open Microsoft Entra ID."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Navigate to ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Enterprise applications - All Applications."]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Select"]}," New application."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"img","attributes":{"src":"/assets/image-20200420-220635.dc46cc64b3f427a8cdbce5f8086b712423e5dae7c217c65a4fa85d81111876b5.f0cddcd7.png","alt":""},"children":[]}]},{"$$mdtype":"Tag","name":"ol","attributes":{"start":4},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Select Add from the gallery>"]}," Microsoft Entra ID SAML Toolkit."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"img","attributes":{"src":"/assets/configuring-azure-ad-saml-2-0-for-identity-federation-2024-02-11.753b97922b579691c9c294f22438d07f1804c3ec89748a846a1cd7959bdf0e92.f0cddcd7.png","alt":""},"children":[]}]},{"$$mdtype":"Tag","name":"ol","attributes":{"start":5},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Type the name you want for the application."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"img","attributes":{"src":"/assets/configuring-azure-ad-saml-2-0-for-identity-federation-2024-02-11-1.a81d24f05e5828c569a315c7b01e842911ad03d0437b0691dfaa214fbe8b233b.f0cddcd7.png","alt":""},"children":[]}]},{"$$mdtype":"Tag","name":"ol","attributes":{"start":6},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Navigate to Visit Enterprise Applications."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Select"]}," ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["<your_app>"]},"."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"img","attributes":{"src":"/assets/configuring-azure-ad-saml-2-0-for-identity-federation-2024-02-11-2.8fa506e534905ed6dad901561cc159d3d3cc5182ca4a13c1034578924068deff.f0cddcd7.png","alt":""},"children":[]}]},{"$$mdtype":"Tag","name":"ol","attributes":{"start":8},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Select Manage > Single sign-on."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Select SAML."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["On the",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Set up single sign-on with SAML"]}," page, edit the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Basic SAML Configuration."]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"img","attributes":{"src":"/assets/configuring-azure-ad-saml-2-0-for-identity-federation-2024-02-11-3.2b77126bd4bc8486f1c8e0452a5ddd80231817fc84200291b494d89f106b91af.f0cddcd7.png","alt":""},"children":[]}]},{"$$mdtype":"Tag","name":"ol","attributes":{"start":11},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Change the following fields in the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Basic SAML Configuration."]}]}]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Identifier (Entity ID)"]},": Examples:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["urn:treasuredata:sso:aws:<your_account_name>"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["urn:treasuredata:sso:aws-tokyo:<your_account_name>"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["urn:treasuredata:sso:eu01:<your_account_name>"]}]}]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Reply URL"]},": ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"https://sso.treasuredata.com/login/callback"},"children":["https://sso.treasuredata.com/login/callback"]}]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Sign-on URL"]},":"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["US: ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["https://console.us01.treasuredata.com/users/initiate_sso?account_name=<your_account_name>"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["JP: ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["https://console.treasuredata.co.jp/users/initiate_sso?account_name=<account_name>"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Europe: ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["https://console.eu01.treasuredata.com/users/initiate_sso?account_name=<account_name>"]}]}]},{"$$mdtype":"Tag","name":"ol","attributes":{"start":12},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Locate the Entity ID in the Treasure Console"]}," under**Administration > Sign In Settings > Identity Federation."]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Go back to the Azure console. Go to Attributes & Claims** section. Choose the value you want to use for the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Unique User Identifier."]}," If ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["user.mail"]}," is indicated, you can set up the TD user with their email. If the value is ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["[user.name](<http://user.name>)"]},", set the field with the user name."]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Select ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Save"]},"."]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Navigate to ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Enterprise applications - All Applications."]}]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Select the desired application"]},"."]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Select",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Users and groups > Add user."]},{"$$mdtype":"Tag","name":"br","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"img","attributes":{"src":"/assets/configuring-azure-ad-saml-2-0-for-identity-federation-2024-02-09.34557ea8ff55cdcf96793b48ab7a547166dae1953a4cd0c40df36fd02537756c.f0cddcd7.png","alt":""},"children":[]}]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Add users and assign roles."]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["After users are assigned, navigate to ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Single sign-on"]},".",{"$$mdtype":"Tag","name":"br","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"img","attributes":{"src":"/assets/configuring-azure-ad-saml-2-0-for-identity-federation-2024-02-09-1.3afadde3dfd449281c1d0ba63c3a598464074d8e184ed6559bf223a9d71a21c0.f0cddcd7.png","alt":""},"children":[]}]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Gather the following items from the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Single sign-on"]}," page to complete your configuration from within the Treasure Console. Ensure you are checking the configuration for the correct Entity ID."]}]}]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"img","attributes":{"src":"/assets/image-20200304-233834.06571782b0e63522fbfdc86e3431ba0d1e01d15ac1b4f48d8b3f8d74da5a1d45.f0cddcd7.png","alt":""},"children":[]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"faqs","__idx":1},"children":["FAQs"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"why-cant-i-authenticate-from-auth0","__idx":2},"children":["Why can't I authenticate from Auth0?"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["If you receive the following error, \"Could not authenticate you from Auth0 because \"Recipient is invalid. configured: https://sso.treasuredata.com/login/callback\"."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Review the URL of your identity server. It is possible that it is set to the incorrect URL."]}]},"headings":[{"value":"Configuring Microsoft Entra ID SAML 2 0 for SSO","id":"configuring-microsoft-entra-id-saml-2-0-for-sso","depth":1},{"value":"FAQs","id":"faqs","depth":1},{"value":"Why can't I authenticate from Auth0?","id":"why-cant-i-authenticate-from-auth0","depth":2}],"frontmatter":{"seo":{"title":"Configuring Microsoft Entra ID SAML 2 0 for SSO"}},"lastModified":"2026-06-01T09:09:59.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/products/control-panel/security/sign-in-settings/configuring-microsoft-entra-id-saml-2-0-for-sso","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}