Single Sign-On (SSO) SAML: Integrating with Microsoft Entra ID

• Requirements
• Setup instructions
  • Start the integration within Managed Studio
  • Create the Managed Studio app within the Microsoft Entra admin center
  • Configure the Managed Studio application within the Microsoft Entra admin center
  • Finish the integration within the Managed Studio SSO Integration modal
• Finding your Single sign-on URL
• Next steps

#Requirements

• Admin access to create the app in your Identity Provider's Admin Console

#Setup instructions

#Start the integration within Managed Studio

1. Navigate to the Settings page
2. Click Single sign-on (SAML)
3. Click the New provider button
4. Make a note of the following two fields from the Single sign-on configuration modal to populate your IdP Admin Console with in the next step:
   • Service Provider Consumer URL
   • Service Provider entity ID

#Create the Managed Studio app within the Microsoft Entra admin center

1. Sign in to the Microsoft Entra admin center
2. In the left navigation bar, click Enterprise apps
3. Click New application
4. On the following page, click Create your own application
5. Enter a Name for your application
6. Click Create

#Configure the Managed Studio application within the Microsoft Entra admin center

1. From the left navigation panel, click Single sign-on
2. Select SAML
3. In the Basic SAML Configuration section, click Edit
4. Enter the following values from earlier:
   • Identifier (Entity ID): Service Provider entity ID value from Managed Studio SSO Integration tab
   • Reply URL (Assertion Consumer Service URL): Service Provider Consumer URL value from Managed Studio SSO Integration tab
5. Click Save
6. In the SAML Certificates section, find Certificate (Base64) and click Download
7. Copy the values from the following two fields. You will need to paste them into the Managed Studio SSO Integration modal in the next step:
   • Login URL
   • Microsoft Entra Identifier

#Finish the integration within the Managed Studio SSO Integration modal

1. Enter the two fields from the Microsoft Entra admin center into the Managed Studio SSO Integration modal:
   • Single Sign-On URL: Login URL from the Microsoft Entra admin center
   • Identity Provider entity ID: Microsoft Entra Identifier from the Microsoft Entra admin center
2. Upload the Identity provider certificate
3. Click Save

#Finding your Single sign-on URL

1. Navigate to the Settings page
2. Click Single sign-on (SAML)
3. Your Single sign-on URL is shown at the top of the page

#Next steps

1. Sign in using your Single sign-on URL to confirm the integration works
2. Verify your email domains and choose whether single sign-on is optional or required for each one. See Single Sign-On (SSO) SAML: Configure one or more email domains for your studio
3. Let your users know how to sign in. See Single Sign-On (SSO) SAML: Signing in