# SAML Microsoft Entra (Azure)

**URL:** https://discussions.eramba.org/t/saml-microsoft-entra-azure/9098
**Category:** Articles
**Created:** [September 28, 2026, 4:42pm UTC](https://discussions.eramba.org/t/saml-microsoft-entra-azure/9098 "2026-09-28T16:42:07Z")
**Posts on this page:** 1
**Page:** 1

<div class="post-metadata">

### Author: ![kisero](https://discussions.eramba.org/user_avatar/discussions.eramba.org/kisero/32/2925_2.png) [@kisero](https://discussions.eramba.org/u/kisero)
#### Post date: [September 28, 2026, 4:42pm UTC](https://discussions.eramba.org/t/saml-microsoft-entra-azure/9098/1 "2026-09-28T16:42:07Z")

</div>

Set the following values in the Entra Enterprise Application (Single Sign-On → SAML):

 ![](https://discussions.eramba.org/uploads/default/original/2X/6/619043a749b7065b2cbbd62279fd2598b45d7dbe.png)

**Identifier (Entity ID)**

```plaintext
https://your-eramba-domain/samlConnectors/getMetadata

```

Copy

**Reply URL (Assertion Consumer Service URL)**

```plaintext
https://your-eramba-domain/login?acs=1
https://your-eramba-domain/portal/awareness-programs/login
https://your-eramba-domain/portal/vendor-assessments/login
https://your-eramba-domain/portal/account-reviews/login
https://your-eramba-domain/portal/policy/login

```

Copy

**Sign on URL** _(optional)_

```plaintext
https://your-eramba-domain/saml/saml-connectors/single-sign-on

```

Copy

**Relay State** _(optional)_

```plaintext
https://your-eramba-domain/login

```

Copy

**Logout URL** _(optional)_

```plaintext
https://your-eramba-domain/saml/saml-connectors/single-logout

```

Copy

Navigate to **Settings \> Authentication Methods \> SAML Connectors** and create a new SAML Connector.

 ![](https://discussions.eramba.org/uploads/default/original/2X/3/3ff49ffa937801b1e879705fa318f2895a94a5bf.png)

| **eramba SAML Connector field** | **Entra / Azure value** |
| --- | --- |
| Eramba Identity Provider | Microsoft Entra Identifier |
| IdP x509 Certificate | Certificate (Base64) — download the certificate and paste it directly into eramba |
| Remote sign in URL | Login URL |
| Email field | `http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress` |

> The Email field may differ depending on your attributes/claims configuration. Verify the exact claim name under Attributes & Claims in the Entra Enterprise Application before entering it in eramba.

 ![](https://discussions.eramba.org/uploads/default/original/2X/2/2bd94dcefbf4ba14ccdf74c06f7281061087d2c7.png)

 ![](https://discussions.eramba.org/uploads/default/original/2X/a/a6ead881ff3bc1dd05e7ae08638c179d8e938997.png)

> If you are using entra MFA, set **Authentication Context** to **disabled**.

 ![](https://discussions.eramba.org/uploads/default/original/2X/0/0b3627eb749d2a7fae79b8be0ccda718e4aaadf3.png)