> ## Documentation Index
> Fetch the complete documentation index at: https://docs.rad.security/llms.txt
> Use this file to discover all available pages before exploring further.

# Single Sign-On (SSO) with Microsoft using SAML

> Configure enterprise SSO with Microsoft Azure Active Directory using SAML

## Configuration

1. Log into Azure Portal

2. Navigate to Microsoft Entra ID

3. Make sure you are on the right tenant. If not you can switch by clicking **Manage tenants**

4. Navigate to **Enterprise Applications**

5. Click **+ New Application**

6. Click **Create your own application**

7. Select **Integrate any other application you don't find in the gallery (Non-gallery)**

8. Enter a meaningful name for your application (for example RAD Security)

9. Click **Create**

10. Navigate to **Manage → Single sign-on**

11. Select **SAML**

12. Under **Basic SAML Configuration**, enter:
    * **Identifier (Entity ID):** `https://api.rad.security/keycloak/realms/<tenant_id>`
    * \*\*Reply URL (Assertion Consumer Service URL): \*\*`https://api.rad.security/keycloak/realms/<tenant_id>/broker/saml/endpoint`

Replace `<tenant_id>` with the value provided by RAD Security team.

13. Locate **App Federation Metadata URL** in the **SAML Certificates** section
14. **IMPORTANT! Provide this URL to RAD Security team**

## Next Steps

### Link Account

After RAD Security team confirms that the integration is ready, you need to link your account.

1. Navigate to **Preferences → OIDC**
2. Click **Link SAML** button
3. Authenticate with Microsoft

### Signing In

1. Visit `https://app.rad.security/sign-in`
2. Click **Using Enterprise SSO?**
3. Enter your email address and select **Next**
4. Click **Sign In with SAML** button

<Frame>
  <img src="https://mintcdn.com/radsecurity/UOqvK6orKJGe5TX3/rad-security/platform/enterprise-authentication/images/saml-sign-in.png?fit=max&auto=format&n=UOqvK6orKJGe5TX3&q=85&s=9e5a8998eda23d58a5f9bf47fa4021cc" alt="Sign In with SAML" width="986" height="804" data-path="rad-security/platform/enterprise-authentication/images/saml-sign-in.png" />
</Frame>
