> ## Documentation Index
> Fetch the complete documentation index at: https://docs.y.uno/llms.txt
> Use this file to discover all available pages before exploring further.

# Microsoft Entra ID SSO Guide

> Connect the Dashboard to Microsoft Entra ID for SSO using SAML 2.0 configuration

This guide explains how to connect Yuno to Microsoft Entra ID (formerly Azure Active Directory) using SAML 2.0.

## Prerequisites

* A Microsoft Entra ID tenant
* An application for use with Yuno
* Entra ID admin privileges to manage SSO settings
* Access to the [Yuno dashboard](https://dashboard.y.uno/)

<Steps>
  <Step title="Configure the basic SAML settings">
    First, go to the dashboard and click your profile image, then open **Security**. Navigate to the Single Sign-On (SSO) tab, click **Set up** and gather this info:

    * Identifier (Entity ID)
    * Assertion Consumer Service URL

    <Frame>
      <img src="https://mintcdn.com/yuno-3979e326/MTlogjS0_SlxtlJG/images/reference/microsoft-entra-id-sso-guide/image1.png?fit=max&auto=format&n=MTlogjS0_SlxtlJG&q=85&s=897c60eb2413502e3bc5312b527038ea" alt="Yuno dashboard 'Set up SSO in Yuno' panel showing the identity provider set to Microsoft, with the Identifier (Entity ID) and Assertion Consumer Service URL fields to copy into the identity provider" width="1024" height="775" data-path="images/reference/microsoft-entra-id-sso-guide/image1.png" />
    </Frame>

    In Microsoft Entra ID, go to:

    **Enterprise applications → All applications → Your application → Single sign-on**

    Under **Basic SAML configuration**, enter the values from the Yuno dashboard.

    <Frame>
      <img src="https://mintcdn.com/yuno-3979e326/MTlogjS0_SlxtlJG/images/reference/microsoft-entra-id-sso-guide/image2.png?fit=max&auto=format&n=MTlogjS0_SlxtlJG&q=85&s=466b5138e1abe7400fc49a51b0b0e567" alt="Microsoft Entra ID enterprise application Single sign-on page showing the Basic SAML Configuration section with Identifier (Entity ID) and Reply URL (Assertion Consumer Service URL) fields highlighted, plus the Attributes & Claims and SAML Certificates sections below" width="645" height="592" data-path="images/reference/microsoft-entra-id-sso-guide/image2.png" />
    </Frame>
  </Step>

  <Step title="Export and upload the federation metadata XML">
    In Microsoft Entra ID, navigate to the **SAML certificates** section and download the **Federation Metadata XML** file.

    <Frame>
      <img src="https://mintcdn.com/yuno-3979e326/MTlogjS0_SlxtlJG/images/reference/microsoft-entra-id-sso-guide/image3.png?fit=max&auto=format&n=MTlogjS0_SlxtlJG&q=85&s=b32a681a83bd56ac7b8737255a5336a5" alt="Microsoft Entra ID SAML Certificates section with the Federation Metadata XML download link highlighted, used to export the metadata file for Yuno" width="1536" height="1024" data-path="images/reference/microsoft-entra-id-sso-guide/image3.png" />
    </Frame>

    Then, in the Yuno dashboard:

    1. Upload the XML file under **Yuno configuration → Option A: Upload metadata XML**
    2. Wait for the **Upload completed** confirmation
    3. Click **Save**

    <Frame>
      <img src="https://mintcdn.com/yuno-3979e326/MTlogjS0_SlxtlJG/images/reference/microsoft-entra-id-sso-guide/image4.png?fit=max&auto=format&n=MTlogjS0_SlxtlJG&q=85&s=f2f90f6dfb9215df2f9e31658784e181" alt="Yuno dashboard 'Yuno configuration' step 3 showing Option A with the federation metadata XML file uploaded and marked 'Upload completed', and the Cancel and Save buttons" width="1024" height="1536" data-path="images/reference/microsoft-entra-id-sso-guide/image4.png" />
    </Frame>

    Alternatively, you can take the information listed in **Option B** and enter it manually.
  </Step>

  <Step title="Verify SAML certificate settings">
    In Microsoft Entra ID, open **SAML certificates** and make sure:

    * The signing option is **Sign SAML response and assertion**
    * The signing algorithm is **SHA-256**

    Click **Save** to apply the changes.
  </Step>
</Steps>

## Troubleshooting

If you cannot set up the SSO connection or run into issues after initial configuration:

* Remember Yuno requires **signed SAML responses**, check:
  * Both the SAML response and the assertion are signed
  * The signing algorithm is **SHA-256**
  * The signing certificate matches the one uploaded to Yuno
* Review SSO logs in the Yuno dashboard under **Security → Single sign-on (SSO)**