> ## Documentation Index
> Fetch the complete documentation index at: https://syteca.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Configure Azure SSO Integration

> Set up SAML 2.0 Single Sign-On between Microsoft Azure Enterprise Applications and the Syteca Management Tool.

This page configures SAML 2.0 authentication between Microsoft Azure (Entra ID) Enterprise Applications and the Syteca Management Tool. See [SSO integration overview](/docs/administration/integrations/sso) for what SSO integration does and the Management Tool settings shared across every provider.

## Configure Microsoft Azure

<Steps>
  <Step title="Create an enterprise application">
    On the Azure **Home** page, click **Enterprise applications**, then **New application**, then **Create your own application**. Enter a name for the application and click **Create**.
  </Step>

  <Step title="Assign users or groups">
    Select **Assign users and user groups**, click **Add user/group**, and select the users or groups that should be able to log in to Syteca through Azure SSO.

    <Note>
      After adding a user or group, confirm the assigned **Role** is correct, and edit it if needed.
    </Note>
  </Step>

  <Step title="Enable SAML single sign-on">
    Open the **Single sign-on** section and select **SAML**. On the **Set up Single Sign-On with SAML** page, click **Edit**.
  </Step>

  <Step title="Configure the SAML identifier and reply URL">
    Set the following fields:

    * **Identifier (Entity ID):** your Management Tool URL, for example `https://<hostname or IP address>/Ekran System`
    * **Reply URL (Assertion Consumer Service URL):** `https://<hostname or IP address>/Ekran System/Account/ConsumeSSO`

    Click **Save**.
  </Step>

  <Step title="Download the federation metadata">
    Scroll to the **SAML Signing Certificate** section and download the **Federation Metadata XML** file (named `SytecaSSO.xml`).
  </Step>
</Steps>

## Configure the Management Tool

<Steps>
  <Step title="Open SSO Integration settings">
    Click **Configuration** at the top of the Management Tool, then select the **SSO Integration** tab.
  </Step>

  <Step title="Enter the issuer and upload the metadata">
    In **Issuer Name**, enter the Management Tool URL. Upload the `SytecaSSO.xml` file using **Choose File**.
  </Step>

  <Step title="Review the auto-create account setting">
    <Note>
      The **Auto-create a Management Tool account for a new user on the first SSO login** checkbox is selected by default. See [SSO integration overview](/docs/administration/integrations/sso#what-every-integration-configures-in-common) for what this controls.
    </Note>
  </Step>

  <Step title="Save and download the Management Tool metadata">
    Click **Save**, then copy the **Metadata URL** into a new browser tab to download `Metadata.xml`.
  </Step>

  <Step title="Upload the Management Tool metadata to Azure">
    In Azure, go to **Home → Enterprise applications → All Applications → Browse Azure AD Gallery → SytecaSSO**, click **Upload metadata file**, and select `Metadata.xml`. Click **Save**.
  </Step>

  <Step title="Verify the integration">
    Log in to the Management Tool using **Log in with SSO** to confirm the integration works.
  </Step>
</Steps>

<Frame caption="Configuring the SAML Identifier and Reply URL fields in Azure Enterprise Applications.">
  <img src="https://mintcdn.com/syteca/0FlD-vkHsBA1azVX/images/administration/integrations/sso-azure-saml-config.png?fit=max&auto=format&n=0FlD-vkHsBA1azVX&q=85&s=c3007c98bd1a14eaa3f9857862f5c9cf" alt="Azure SAML configuration page with Identifier and Reply URL fields" width="975" height="572" data-path="images/administration/integrations/sso-azure-saml-config.png" />
</Frame>

<Note>
  SSO authentication is not currently supported in [Multi-Tenant mode](/docs/administration/multi-tenant/overview).
</Note>

## Related

<CardGroup cols={2}>
  <Card title="SSO integration overview" icon="key" href="/docs/administration/integrations/sso">
    All supported SSO providers and shared Management Tool settings.
  </Card>

  <Card title="Okta SSO" icon="shield" href="/docs/administration/integrations/sso-okta">
    Configure SSO through Okta instead.
  </Card>

  <Card title="ForgeRock SSO" icon="lock" href="/docs/administration/integrations/sso-forgerock">
    Configure SSO through ForgeRock instead.
  </Card>

  <Card title="User management" icon="users" href="/docs/administration/users/users">
    Managing Management Tool user accounts and permissions.
  </Card>
</CardGroup>