Single Sign-On (SSO) with Microsoft using SAML

Configuration

1. Log into Azure Portal

2. Navigate to Microsoft Entra ID

3. Make sure you are on the right tenant. If not you can switch by clicking Manage tenants

4. Navigate to Enterprise Applications

5. Click + New Application

6. Click Create your own application

7. Select Integrate any other application you don't find in the gallery (Non-gallery)

8. Enter a meaningful name for your application (for example RAD Security)

9. Click Create

10. Navigate to Manage → Single sign-on

11. Select SAML

12. Under Basic SAML Configuration, enter:

    • Identifier (Entity ID): https://api.rad.security/keycloak/realms/<tenant_id>
    • **Reply URL (Assertion Consumer Service URL): **https://api.rad.security/keycloak/realms/<tenant_id>/broker/saml/endpoint

Replace <tenant_id> with the value provided by RAD Security team.

13. Locate App Federation Metadata URL in the SAML Certificates section
14. IMPORTANT! Provide this URL to RAD Security team

Next Steps

Link Account

After RAD Security team confirms that the integration is ready, you need to link your account.

1. Navigate to Preferences → OIDC
2. Click Link SAML button
3. Authenticate with Microsoft

Signing In

1. Visit https://app.rad.security/sign-in
2. Click Using Enterprise SSO?
3. Enter your email address and select Next
4. Click Sign In with SAML button