Ctrlk
Visit our websitePricingBlogPlaygroundAPI Docs
For the complete documentation index, see llms.txt. This page is also available as Markdown.

Microsoft Entra ID

This guide assumes you have already clicked Enable SAML in Datasaur and the Enable SAML 2.0 dialog is currently open.

Integrate Microsoft Entra ID

Only users with one of the following roles can create an enterprise application: Global Administrator, Cloud Application Administrator, Application Administrator, or owner of the service principal.

Create an enterprise app

  1. Open the Azure portal and go to Microsoft Entra ID.

  2. In the left sidebar, go to Manage → Enterprise applications.

  3. Click New application > Create your own application.

  4. Provide a name and select Integrate any other application you don't find in the gallery.

  5. Click Create.

Configure SAML

  1. Open the newly created app.

  2. In the left sidebar, go to Manage > Single sign-on.

  3. Select SAML.

  4. Complete the following sections. Fields not mentioned can be left unchanged.

    1. Basic SAML Configuration

      1. Identifier (required): Use the value from the Service provider issuer field in the Enable SAML 2.0 dialog, which is datasaur.

      2. Reply URL (required): Use the Service provider sign in URL value in the Enable SAML 2.0 dialog.

      3. Relay State (optional): Enter Company ID using the following JSON format: {"companyId": "<your-company-id>"}.

    2. Attributes & Claims

      1. Use email (required) as the name and user.mail as the source attribute. Note that the default emailaddress is not sufficient.

      2. Use displayName (optional) as the name and select your preferred attribute as the source, for example, user.displayname.

    3. SAML Certificates

      1. Signing Option: Select Sign SAML response and assertion.

Add users to the app integration

  1. In the left sidebar, go to Manage > Users and groups.

  2. Assign the users who should be able to sign in to Datasaur using SAML.

Complete the Datasaur SAML form

  1. Return to the Single sign-on page in Microsoft Entra ID.

  2. Copy the Login URL, then paste it into the Identity provider sign in URL field.

  3. Copy the Microsoft Entra Identifier, then paste it into the Identity provider issuer field.

  4. Download the Certificate (Base64) from the SAML Certificates section, then use its content for the Public certificate field.

  5. Click Enable SAML 2.0.

Last updated