Skip to main content

Microsoft Entra ID (Azure AD) SSO Setup (Step-by-Step)

Below are the recommended steps to configure SAML SSO between Microsoft Entra ID (Azure AD) and SINAI.


1. Create a new Enterprise Application

  1. Go to the Azure Portal: https://portal.azure.com

  2. Navigate to Microsoft Entra ID

  3. From the left sidebar, select Enterprise Applications

  4. Click + New application

  5. Select + Create your own application

  6. Enter a name (e.g., SINAI SSO)

  7. Select Integrate any other application you don't find in the gallery (Non-gallery)

  8. Click Create

2. Configure SAML SSO

  1. In your new application, go to Single sign-on

  2. Select SAML

3. Configure Basic SAML Settings

  1. Click Edit in the Basic SAML Configuration section

  2. Enter the values provided by SINAI:

    • Identifier (Entity ID) → provided by SINAI

    • Reply URL (Assertion Consumer Service URL) → provided by SINAI

  3. (Optional) Add:

    • Sign-on URL → SINAI login page (if provided)

  4. Click Save

4. Configure User Attributes & Claims

  1. In the Attributes & Claims section, click Edit

  2. Ensure the following mappings exist:

SINAI Attribute

Azure Attribute

email

user.mail or user.userprincipalname (depending on account configuration)

given_name

user.givenname

family_name

user.surname

  1. Click Save

⚠️ Note: The email value must match the user’s SINAI account email.

5. Download Identity Provider Metadata

  1. In the SAML Signing Certificate section

  2. Copy the App Federation Metadata URL

OR

  1. Click Download next to Federation Metadata XML

➡️ You will share this with SINAI in a later step.

6. Assign Users or Groups

  1. From the left sidebar, select Users and groups

  2. Click + Add user/group

  3. Select the users or groups who should have access to SINAI

  4. Click Assign

⚠️ Users must be assigned to the application to use SSO.

7. Send Metadata to SINAI

Provide SINAI with one of the following:

  • Metadata URL (preferred)

  • Metadata XML file

SINAI will use this to complete the trust configuration.

8. Test SSO

  1. In Azure, go to Single sign-on → Test

  2. Or navigate to the SINAI login page and attempt login via SSO

During testing, verify:

  • Successful login flow

  • Correct user attributes passed

  • Correct email matching existing SINAI user

9. Enable SSO

Once testing is successful, SINAI will enable SSO for your organization.

Notes & Best Practices

  • Ensure users already exist in SINAI before testing

  • If using multiple domains, confirm with SINAI which domains are enabled

  • Keep at least one non-SSO admin login as backup during rollout

  • Coordinate testing with SINAI to quickly resolve any issues

Related Articles
How to Configure Single Sign-On (SSO)
Google Workspace SSO Setup (Step-by-Step)
Did this answer your question?