> ## Documentation Index
> Fetch the complete documentation index at: https://docs.chamelio.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Entra ID – SAML Setup

> Step-by-step guide to configure SSO via SAML from your Microsoft Entra ID tenant to Chamelio

This guide walks you through setting up SSO via SAML from your Entra ID tenant to Chamelio. You will need the SSO Self Service link that Chamelio sends you before starting.

<Steps>
  <Step title="Get Started">
    Open the SSO Self Service link Chamelio provided. You will see the setup screen.

    Click **Get Started**.

    On the **Select Your Identity Provider** page, select **Custom SAML**, then click **Next**.

    <Warning>
      Do **not** select the Entra ID option — that configures an OIDC connection. Select **Custom SAML** to set up a SAML connection from Entra ID.
    </Warning>
  </Step>

  <Step title="Create an Application">
    The Self Service page shows two values you will need:

    * **Single Sign-On URL** (also called Assertion Consumer Service URL / Callback URL) — starts with `https://`
    * **Service Provider Entity ID** (also called Audience URI) — starts with `urn:auth0:`

    Copy both values before proceeding.

    In Entra ID, navigate to **Enterprise applications** and select **New application**.

    1. Select **Create your own application**.
    2. Enter a name for your app, e.g. `Chamelio-SAML`.
    3. Choose **Integrate any other application you don't find in the gallery (Non-gallery)**.
    4. Click **Create**.

    Once the application is created:

    5. Select the **Single Sign-On** menu and choose **SAML**.
    6. Select **Edit** on the **Basic SAML Configuration** section.
    7. Set **Identifier (Entity ID)** to the **Service Provider Entity ID** value from the Self Service page (starts with `urn:auth0:`).
    8. Set **Reply URL (Assertion Consumer Service URL)** to the **Single Sign-On URL** from the Self Service page (starts with `https://`).
    9. Click **Save**.

    Select **Next** on your Self Service page.
  </Step>

  <Step title="Configure Connection">
    From the SAML configuration page in Entra ID, locate **SAML Certificates** (section 3) and copy the **App Federation Metadata URL**.

    On the Self Service page, paste this value into the **Metadata URL** field.

    Click **Create Connection**, then **Proceed**.
  </Step>

  <Step title="Test SSO">
    Click the **Test Connection** button. You will be redirected to the Microsoft SAML sign-in process.

    Once testing is complete, head back to the Self Service page. You can see the data coming in through the SAML connection. Click **Done** to complete the setup.
  </Step>

  <Step title="Finalize">
    **Assign users and groups**

    In the created Enterprise App, navigate to **Users and groups** and assign the users and groups that are allowed to access Chamelio.

    **Set assignment required**

    Navigate to **Manage > Properties** and confirm that **Assignment required** is set to **Yes**. This ensures that unassigned users cannot access the app.
  </Step>
</Steps>