# AZURE AD

#### Step 1 - Configure SSO in AZURE AD

* Log in to the Azure portal.
* Go to Enterprise Applications and click Add a New Application, and then click on Create your own application.

  <figure><img src="/files/MtwdT1QF3zBuWupdmvPD" alt=""><figcaption></figcaption></figure>

  <figure><img src="/files/7bA5Hq5i5WLetgDp5Gqw" alt=""><figcaption></figcaption></figure>
* Set the app name you want, and check the `Integrate any other application you don't find in the gallery` option, and click on Create.

  <figure><img src="/files/FfW1pvZKbkIuinZnzMFz" alt=""><figcaption></figcaption></figure>
* On the Applications Overview page, click on the Set up single sign-on card then choose SAML as the single sign-on method.

  <figure><img src="/files/Y67INAxsHlMQqbNapxH8" alt=""><figcaption></figcaption></figure>
* On the `Basic SAML Configuration` section, enter the identifier and reply URL, and click on `Save`.
  * **Identifier (Entity ID)**
  * **Reply URL (Assertion Consumer Service URL)**

    <figure><img src="/files/6kDwLZ3RKEgstBYW5bp8" alt=""><figcaption></figcaption></figure>

    <figure><img src="/files/a9FQPEXTHylcz9yGXDCb" alt=""><figcaption></figcaption></figure>
* On the Attributes & Claims section, click on the Edit link.

  <figure><img src="/files/jItLbk83EkLcEG0kf2HA" alt=""><figcaption></figcaption></figure>
* Copy the name and email claim attribute names.

  <figure><img src="/files/H8LGzpOx6WTxO11IiJAo" alt=""><figcaption></figcaption></figure>
* On the SAML Signing Certificate and Setup sections, download the Federation Metadata XML and copy the Login URL to be used on the CloudIO Setup page.

  <figure><img src="/files/owJhbw0aDc738CKkfwcF" alt=""><figcaption></figcaption></figure>
* Go to Users and Groups on the left side menu to assign the users or groups that should have access to CloudIO.

  <figure><img src="/files/y9wRovUuhXXmFU2FKgzT" alt=""><figcaption></figcaption></figure>

#### **Step 2 - Configure Azure SSO in CloudIO**

* Login to CloudIO and navigate to the settings tab.

  ![](/files/zIjJgvikkaC4h0MfmF4L)
* Select SAML Auth provider and configure the below details from Step 1

  <figure><img src="/files/oF36GrgYm3VGnkLBWOx9" alt=""><figcaption></figcaption></figure>

\ <br>

#### &#x20;<br>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://next-docs.cloudio.io/app-deployment/configure-sso/saml/azure-ad.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.