> ## Documentation Index
> Fetch the complete documentation index at: https://docs.y.uno/llms.txt
> Use this file to discover all available pages before exploring further.

# Microsoft Entra ID SSO Guide

This guide explains how to connect Yuno to Microsoft Entra ID (formerly Azure Active Directory) using SAML 2.0.

## Prerequisites

* A Microsoft Entra ID tenant
* An application for use with Yuno
* Entra ID admin privileges to manage SSO settings
* Access to the [Yuno dashboard](https://dashboard.y.uno/)

<Steps>
  <Step title="Configure the basic SAML settings">
    First, go to the dashboard and click your profile image, then open **Security**. Navigate to the Single Sign-On (SSO) tab, click **Set up** and gather this info:

    * Identifier (Entity ID)
    * Assertion Consumer Service URL

    <Frame>
      <img src="https://mintcdn.com/yuno-3979e326/MTlogjS0_SlxtlJG/images/reference/microsoft-entra-id-sso-guide/image1.png?fit=max&auto=format&n=MTlogjS0_SlxtlJG&q=85&s=897c60eb2413502e3bc5312b527038ea" width="1024" height="775" data-path="images/reference/microsoft-entra-id-sso-guide/image1.png" />
    </Frame>

    In Microsoft Entra ID, go to:

    **Enterprise applications → All applications → Your application → Single sign-on**

    Under **Basic SAML configuration**, enter the values from the Yuno dashboard.

    <Frame>
      <img src="https://mintcdn.com/yuno-3979e326/MTlogjS0_SlxtlJG/images/reference/microsoft-entra-id-sso-guide/image2.png?fit=max&auto=format&n=MTlogjS0_SlxtlJG&q=85&s=466b5138e1abe7400fc49a51b0b0e567" width="645" height="592" data-path="images/reference/microsoft-entra-id-sso-guide/image2.png" />
    </Frame>
  </Step>

  <Step title="Export and upload the federation metadata XML">
    In Microsoft Entra ID, navigate to the **SAML certificates** section and download the **Federation Metadata XML** file.

    <Frame>
      <img src="https://mintcdn.com/yuno-3979e326/MTlogjS0_SlxtlJG/images/reference/microsoft-entra-id-sso-guide/image3.png?fit=max&auto=format&n=MTlogjS0_SlxtlJG&q=85&s=b32a681a83bd56ac7b8737255a5336a5" width="1536" height="1024" data-path="images/reference/microsoft-entra-id-sso-guide/image3.png" />
    </Frame>

    Then, in the Yuno dashboard:

    1. Upload the XML file under **Yuno configuration → Option A: Upload metadata XML**
    2. Wait for the **Upload completed** confirmation
    3. Click **Save**

    <Frame>
      <img src="https://mintcdn.com/yuno-3979e326/MTlogjS0_SlxtlJG/images/reference/microsoft-entra-id-sso-guide/image4.png?fit=max&auto=format&n=MTlogjS0_SlxtlJG&q=85&s=f2f90f6dfb9215df2f9e31658784e181" width="1024" height="1536" data-path="images/reference/microsoft-entra-id-sso-guide/image4.png" />
    </Frame>

    Alternatively, you can take the information listed in **Option B** and enter it manually.
  </Step>

  <Step title="Verify SAML certificate settings">
    In Microsoft Entra ID, open **SAML certificates** and make sure:

    * The signing option is **Sign SAML response and assertion**
    * The signing algorithm is **SHA-256**

    Click **Save** to apply the changes.
  </Step>
</Steps>

## Troubleshooting

If you cannot set up the SSO connection or run into issues after initial configuration:

* Remember Yuno requires **signed SAML responses**, check:
  * Both the SAML response and the assertion are signed
  * The signing algorithm is **SHA-256**
  * The signing certificate matches the one uploaded to Yuno
* Review SSO logs in the Yuno dashboard under **Security → Single sign-on (SSO)**