> For the complete documentation index, see [llms.txt](https://docs.we360.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.we360.ai/deployment-and-it-ops/identity-and-access/saml-sso-setup/microsoft-entra-id-saml-sso.md).

# Microsoft Entra ID SAML SSO

Configure SAML single sign-on with Microsoft Entra ID, then send the metadata URL to We360 Support for activation.

Use this guide to configure Microsoft Entra ID for We360 SAML SSO.

{% hint style="warning" %}
**We360 Support must activate SSO after your Entra setup.** Send Support the **App Federation Metadata URL** after step 4. SSO will not work until Support confirms activation. Do not test before that confirmation.
{% endhint %}

{% stepper %}
{% step %}

### Create the enterprise application

1. In the Azure portal, open **Microsoft Entra ID**.
2. Go to **Enterprise applications** → **New application**.
3. Select **Create your own application**.
4. Enter a name, such as `We360-SAML-SSO`.
5. Select **Integrate any other application you don't find in the gallery (Non-gallery)**.
6. Select **Create**.
   {% endstep %}

{% step %}

### Select SAML sign-on

1. Open the new enterprise application.
2. Select **Single sign-on**.
3. Select **SAML**.
   {% endstep %}

{% step %}

### Configure SAML values

In **Basic SAML Configuration**, select **Edit**. Enter these values:

* **Identifier (Entity ID):** `https://auth.in.we360.ai/realms/ind-prod`
* **Reply URL (ACS URL):** `https://auth.in.we360.ai/realms/ind-prod/broker/<domain>-azure-ad/endpoint`

Replace `<domain>` with your We360 portal subdomain.

For `https://mydomain.we360.ai`, use:

`https://auth.in.we360.ai/realms/ind-prod/broker/mydomain-azure-ad/endpoint`
{% endstep %}

{% step %}

### Map the user identifier

In **Attributes & Claims**, map **Unique User Identifier** to `user.mail`.
{% endstep %}

{% step %}

### Send metadata to We360 Support

1. Open **SAML Certificates**.
2. Copy the **App Federation Metadata URL**.
3. Send that URL to We360 Support.

Support uses this URL to complete the We360-side SSO configuration. Wait for their confirmation before testing.
{% endstep %}

{% step %}

### Assign users or groups

Go to **Users and groups** → **Add user/group**. Assign test users or a security group.

{% hint style="danger" %}
Users cannot sign in unless they are assigned to the application.
{% endhint %}
{% endstep %}

{% step %}

### Test after activation

After Support confirms activation, open your We360 portal URL and start sign-in. You should be redirected to Microsoft Entra ID.
{% endstep %}
{% endstepper %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.we360.ai/deployment-and-it-ops/identity-and-access/saml-sso-setup/microsoft-entra-id-saml-sso.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.