> ## Documentation Index
> Fetch the complete documentation index at: https://docs.gumloop.com/llms.txt
> Use this file to discover all available pages before exploring further.

# SAML with Entra

> Configure SAML single sign-on to Gumloop with Microsoft Entra ID (formerly Azure Active Directory)

Entra — formerly Azure Active Directory — ranks among the more common IdPs. It can appear complicated, but hopefully it feels a little bit easier with this guide.

## Before you start: get your SP details from Gumloop

A Gumloop organization admin generates an SSO setup link at [gumloop.com/settings/organization/sso](https://www.gumloop.com/settings/organization/sso) (see [SSO, SAML & SCIM](/enterprise-features/sso_saml_scim)). The setup page shows the two Service Provider values you'll copy into Entra:

* **Assertion Consumer Service (ACS) URL** — ends in `/acs`
* **SP Entity ID** — the same URL without the `/acs` suffix

The same page has the fields for the values Entra produces: **Redirect URL**, **IDP Entity ID**, and the **Certificate** upload.

<Steps>
  ### Create an application in Entra

  Entra needs to associate a SAML connection with an *Application*, so the first step will require you to create an application. From any page in Entra, you'll find *Applications* > *Enterprise applications* in the left navigation bar. Click here to navigate to the next page.

  <Frame caption="In the left sidebar, navigate to Applications > Enterprise applications">
    <img src="https://mintcdn.com/agenthub/zL6qAgistqWft1iw/images/idp-guides/idp-assets/entra/entra1.png?fit=max&auto=format&n=zL6qAgistqWft1iw&q=85&s=c76e29edb9137c46036a4dccc3c374f9" width="1920" height="1080" data-path="images/idp-guides/idp-assets/entra/entra1.png" />
  </Frame>

  You'll reach a page that says **Enterprise applications** in bold typeface. Press the *New application* button right under this header.

  <Frame caption="Select 'New application'">
    <img src="https://mintcdn.com/agenthub/zL6qAgistqWft1iw/images/idp-guides/idp-assets/entra/entra2.png?fit=max&auto=format&n=zL6qAgistqWft1iw&q=85&s=070ab99c2af307ecbf25a02e799886ae" width="1920" height="1080" data-path="images/idp-guides/idp-assets/entra/entra2.png" />
  </Frame>

  On the next page, there's a header: **Browse Microsoft Entra Gallery.** You'll also see a few prominent cards with major cloud providers. Ignore all this; the Gumloop connection won't use the gallery. Simply click *Create your own application*, which triggers a slideover from the right.

  <Frame caption="Select 'Create your own application'">
    <img src="https://mintcdn.com/agenthub/zL6qAgistqWft1iw/images/idp-guides/idp-assets/entra/entra3.png?fit=max&auto=format&n=zL6qAgistqWft1iw&q=85&s=9751325f85b3fd25890d92b9c20b697f" width="1920" height="1080" data-path="images/idp-guides/idp-assets/entra/entra3.png" />
  </Frame>

  Entra requires a display name for the application. Write "Gumloop" here.

  <Info>As you type a display name for the application, Entra will try to find matching apps from the Entra Gallery and suggest them as alternatives. Just ignore this.</Info>

  <Frame caption="Assign a display name to the Entra application">
    <img src="https://mintcdn.com/agenthub/zL6qAgistqWft1iw/images/idp-guides/idp-assets/entra/entra4.png?fit=max&auto=format&n=zL6qAgistqWft1iw&q=85&s=184eb7cea8e027b3c9505f35e0e24237" width="1920" height="1080" data-path="images/idp-guides/idp-assets/entra/entra4.png" />
  </Frame>

  Under the display name, Entra offers three radio button options. Select the last one, which reads *Integrate any other application you don't find in the gallery (Non-gallery)*.

  <Frame caption="Tell Entra to create a non-gallery application">
    <img src="https://mintcdn.com/agenthub/zL6qAgistqWft1iw/images/idp-guides/idp-assets/entra/entra5.png?fit=max&auto=format&n=zL6qAgistqWft1iw&q=85&s=497805496890e2e2bd333340d59f1ade" width="1920" height="1080" data-path="images/idp-guides/idp-assets/entra/entra5.png" />
  </Frame>

  Then hit *Create* in the lower left of the slideover, and you're free to configure the Application.

  <Frame caption="Create the application">
    <img src="https://mintcdn.com/agenthub/zL6qAgistqWft1iw/images/idp-guides/idp-assets/entra/entra5b.png?fit=max&auto=format&n=zL6qAgistqWft1iw&q=85&s=7348a06f2301bdfff930f89cdb5ae619" width="1920" height="1080" data-path="images/idp-guides/idp-assets/entra/entra5b.png" />
  </Frame>

  Entra may require a few seconds to create the Application. Once it has finished, you will land on a page detailing the application.

  <Frame caption="When you see this page, you have created your Entra Application">
    <img src="https://mintcdn.com/agenthub/zL6qAgistqWft1iw/images/idp-guides/idp-assets/entra/entra5c.png?fit=max&auto=format&n=zL6qAgistqWft1iw&q=85&s=629deb7b56aac69c90d251ca2dd7c35a" width="1920" height="1080" data-path="images/idp-guides/idp-assets/entra/entra5c.png" />
  </Frame>

  For now, skip assigning users to the Application, but an Entra admin will need to assign them before long.

  <Warning>Users cannot sign in until assigned to the Application by an Entra admin.</Warning>

  ### Enter Gumloop details in Entra

  Now you can configure Entra and Gumloop to communicate with each other. Start by entering details from your Gumloop SSO setup page into the Entra Application. Select the *Set up single sign on* card.

  <Frame caption="Choose to set up single sign-on">
    <img src="https://mintcdn.com/agenthub/zL6qAgistqWft1iw/images/idp-guides/idp-assets/entra/entra6.png?fit=max&auto=format&n=zL6qAgistqWft1iw&q=85&s=09aa6838e1cb24cc3d1ab5a3d289e352" width="1920" height="1080" data-path="images/idp-guides/idp-assets/entra/entra6.png" />
  </Frame>

  Entra will then present a few options. Select the *SAML* card marked with a puzzle piece icon.

  <Frame caption="Select SAML as the single sign-on method">
    <img src="https://mintcdn.com/agenthub/zL6qAgistqWft1iw/images/idp-guides/idp-assets/entra/entra6b.png?fit=max&auto=format&n=zL6qAgistqWft1iw&q=85&s=8a6eb2c7e16c66880c8b651faef1dbab" width="1920" height="1080" data-path="images/idp-guides/idp-assets/entra/entra6b.png" />
  </Frame>

  Entra will route you to its *SAML-based Sign-on* configuration page, where you'll direct your attention first to the *Basic SAML Configuration* card. It has two required values. Gumloop supplies both.

  Click the *Edit* button in the top right corner of the *Basic SAML Configuration* card; you'll see a slideover triggered on the right.

  <Frame caption="Edit the Basic SAML Configuration">
    <img src="https://mintcdn.com/agenthub/zL6qAgistqWft1iw/images/idp-guides/idp-assets/entra/entra7.png?fit=max&auto=format&n=zL6qAgistqWft1iw&q=85&s=0b8d0556a108fef0f974eb0b693c296b" width="1920" height="1080" data-path="images/idp-guides/idp-assets/entra/entra7.png" />
  </Frame>

  In the slideover, Entra requires two values: an *Identifier (Entity ID)* and a *Reply URL (Assertion Consumer Service URL)*.

  1. Start with the *Identifier (Entity ID)* field. Gumloop calls this the *SP Entity ID*, shown on your Gumloop SSO setup page. Paste the URL into Entra.

  2. Next is the *Reply URL (Assertion Consumer Service URL)* field. Gumloop calls this the *Assertion Consumer Service (ACS) URL*. It should look just like the *SP Entity ID* field, only it ends with `/acs`. Paste the URL into Entra.

  <Frame caption="Enter details from Gumloop into Entra">
    <img src="https://mintcdn.com/agenthub/zL6qAgistqWft1iw/images/idp-guides/idp-assets/entra/entra8.png?fit=max&auto=format&n=zL6qAgistqWft1iw&q=85&s=769e336c0634177b58b0a869536d73cd" width="1920" height="1080" data-path="images/idp-guides/idp-assets/entra/entra8.png" />
  </Frame>

  Make sure to hit *Save* toward the top of the page.

  <Frame caption="Save changes">
    <img src="https://mintcdn.com/agenthub/zL6qAgistqWft1iw/images/idp-guides/idp-assets/entra/entra9.png?fit=max&auto=format&n=zL6qAgistqWft1iw&q=85&s=93aac7cc924603c070abc82d339dcbb2" width="1920" height="1080" data-path="images/idp-guides/idp-assets/entra/entra9.png" />
  </Frame>

  Next, you'll enter details about Entra into Gumloop.

  <Frame caption="Returning to the SAML configuration page">
    <img src="https://mintcdn.com/agenthub/zL6qAgistqWft1iw/images/idp-guides/idp-assets/entra/entra16.png?fit=max&auto=format&n=zL6qAgistqWft1iw&q=85&s=7a11629d9627a000a92bb8d1bace7a1b" width="1920" height="1080" data-path="images/idp-guides/idp-assets/entra/entra16.png" />
  </Frame>

  ### Enter Entra details in Gumloop

  Having set up Entra with information about Gumloop, you'll then supply Gumloop with information about the Entra Application. Gumloop needs three pieces of information: an *IDP Entity ID*, a *Redirect URL*, and a *Certificate*.

  Start with the last of these, the *Certificate*. In Entra, you'll find this on the third card, closer to the bottom of the page. Next to the *Certificate (Base64)* heading, Entra shows a blue download link. Click this link. It will download a file named for the application. For example, if you've named the application `Gumloop`, Entra will share a `Gumloop.cer` file. Upload this file on your Gumloop SSO setup page.

  <Frame caption="Download the Certificate (Base64) from Entra and upload it to Gumloop">
    <img src="https://mintcdn.com/agenthub/zL6qAgistqWft1iw/images/idp-guides/idp-assets/entra/entra10.png?fit=max&auto=format&n=zL6qAgistqWft1iw&q=85&s=2ba2b53d5189a12c658101ac3ab71d67" width="1920" height="1080" data-path="images/idp-guides/idp-assets/entra/entra10.png" />
  </Frame>

  For the final two pieces of information, scroll down to the fourth card. Copy the *Microsoft Entra Identifier* field from Entra and paste it into Gumloop's *IDP Entity ID* field. Then copy the *Login URL* field from Entra and paste it into Gumloop's *Redirect URL* field.

  <Frame caption="Copy the Microsoft Entra Identifier and Login URL into Gumloop">
    <img src="https://mintcdn.com/agenthub/zL6qAgistqWft1iw/images/idp-guides/idp-assets/entra/entra11.png?fit=max&auto=format&n=zL6qAgistqWft1iw&q=85&s=abcb3a0721cda99f4de293bcdb3c2b54" width="1920" height="1080" data-path="images/idp-guides/idp-assets/entra/entra11.png" />
  </Frame>
</Steps>

Once you've entered that data in Gumloop, you're finished with Entra configuration!
