# SSO: Microsoft Entra ID (former Azure Active Directory) SAML Integration Set-up

If your organisation uses Microsoft Entra ID to access applications, you can use it to sign in to AB Tasty as well. To create an AB Tasty application in your Microsoft Entra ID tenant, you must have a Microsoft Entra ID account with one of the following permissions:

* **One of the following roles:** Global Administrator, Cloud Application Administrator, or Application Administrator.

To use Microsoft Entra ID to access AB Tasty, you first need to add it as a new SAML application within Microsoft Entra ID, then add the connection information for Microsoft Entra ID to AB Tasty.

{% hint style="info" %}
To perform this configuration, you need an Admin profile in Microsoft Entra ID. If you do not have one, please contact your IT team.
{% endhint %}

## Configure a new SAML integration <a href="#creating-a-new-saml-application" id="creating-a-new-saml-application"></a>

{% stepper %}
{% step %}
Log in to your Microsoft Entra ID account with the required permissions.
{% endstep %}

{% step %}
In the home page left panel, select **Enterprise applications.**
{% endstep %}

{% step %}
On the Enterprise Applications page, select **+ New Application**.

The Microsoft Entra Gallery opens.
{% endstep %}

{% step %}
In the Microsoft Entra ID Gallery, select **+ Create your own application**.
{% endstep %}

{% step %}
In the **Create your own app** window, name your new app "AB Tasty".
{% endstep %}

{% step %}
Select **Integrate any other application you don't find in the gallery (Non-gallery**).
{% endstep %}

{% step %}
At the bottom of the window, select **Create** to create your new app.
{% endstep %}

{% step %}
On the Overview page select **Single sign-on** from the navigation menu, or click on **Set up Single sign on** card.
{% endstep %}

{% step %}
On the Single sign-on page, select **SAML**.
{% endstep %}

{% step %}
Go to **Basic SAML Configuration** section (1) and select **Edit**.
{% endstep %}

{% step %}
Fill these values in Microsoft Entra ID under Basic SAML Configuration

|                                             |                                                                                                                 |
| ------------------------------------------- | --------------------------------------------------------------------------------------------------------------- |
| Identifier (Entity ID):                     | [Retrievable from your AB Tasty SSO configuration module on AB Tasty as **Entity ID** ](#user-content-fn-1)[^1] |
| Reply URL (Assertion Consumer Service URL): | [Retrievable from your AB Tasty SSO configuration module on AB Tasty as **ACS URL**](#user-content-fn-2)[^2]    |
| Sign on URL (Optional):                     | `https://app2.abtasty.com/ssologin`                                                                             |
| Relay State (Optional):                     | `should be left empty`                                                                                          |
| Logout Url (Optional):                      | `https://app2.abtasty.com/logout`                                                                               |
| {% endstep %}                               |                                                                                                                 |

{% step %}
Select **Save** to save these changes
{% endstep %}

{% step %}
Go to the **SAML Certificates** section (3) on the SAML-based Sign-on page.&#x20;
{% endstep %}

{% step %}
Download **Federation Metadata XML.**

[You can now import it on AB Tasty](broken://pages/dDNu2qhPBX0befui510V#set-up-your-sso).&#x20;
{% endstep %}

{% step %}

### <sup>Navigate to User Attribute & Claims</sup>

1. Navigate to User Attributes & Claims.
2. Add a new claim for the user’s email:
   * Name: `mail` (or `user.mail`)
   * Value: set to the user’s email attribute in Entra ID (e.g., `user.mail`).

{% endstep %}
{% endstepper %}

## Manage users and groups

Go to the Users and Groups section in your Microsoft account to allow users/groups to access the new application on Microsoft Entra ID and/or log in from the AB Tasty login page (<https://app2.abtasty.com/ssologin>).

{% hint style="warning" %}
Please make sure all Microsoft Entra ID users authorised to log in to AB Tasty also have an AB Tasty account.
{% endhint %}

<figure><img src="/files/lBaU34B14Wn9HHVtby7b" alt=""><figcaption></figcaption></figure>

[^1]: ![](/files/0yGLOKvmc56oUJ3s1LUF)

[^2]: ![](/files/o724fb75ZD4RzR9jtxQw)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.abtasty.com/account/performance-and-security/how-to-set-up-the-sso/sso-microsoft-entra-id-former-azure-active-directory-saml-integration-set-up.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.