---
title: Azure SSO
slug: azure-sso
docTags: 
createdAt: 2025-04-24T19:49:32.337Z
---

# Finding Metadata in Azure for SSO Configuration

## Introduction

This document provides step-by-step instructions on where to locate the metadata in Microsoft Azure when configuring Single Sign-On (SSO) for a new software integration.

## Prerequisites

- Administrator access to your Azure portal
- The application must be registered in Azure Enterprise Applications



:::hint{type="success"}
## Easiest SSO Setup Is With A Metadata URL

Finding this link will allow you to simply copy and paste the url and you can rely on us to do the rest!

![](https://api.archbee.com/api/optimize/kXX8wW2Q83jcfcYN8-FeX/lwqnkycMAkdSYFtcbCpAg_group-911.png)
:::



## Locating the Metadata URL

### Method 1: Enterprise Applications (Most Common)

1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com/) (formerly Azure Active Directory admin center)
2. Navigate to **Identity** > **Applications** > **Enterprise applications**
3. Select your application from the list (or search for it using the search bar)
4. Select **Single sign-on** from the left menu
5. On the **Set up single sign-on with SAML** page, scroll down to the **SAML Certificates** section
6. Look for **App Federation Metadata Url** - this is the URL you need to provide to your software provider

![](https://api.archbee.com/api/optimize/kXX8wW2Q83jcfcYN8-FeX/XG1THFpARRbLREcZunw-v_c4ee0b27-ddd7-4aab-96c0-ced1019b4cd7.jpg)

### Method 2: Downloading the Federation Metadata XML

If the software vendor requires the XML file instead of the URL:

1. Follow steps 1-5 from Method 1
2. In the **SAML Certificates** section, click **Download** next to **Federation Metadata XML**
3. Save this file to your computer
4. Upload this file to your software provider's SSO configuration page

### Method 3: Tenant-specific Federation Metadata URL

For advanced configurations, you can use the tenant-specific endpoint template:

:::BlockQuote
https\://login.microsoftonline.com/\<TenantDomainName>/FederationMetadata/2007-06/FederationMetadata.xml
:::

Replace \<TenantDomainName> with one of:

- Your registered domain name (e.g., contoso.onmicrosoft.com)
- Your tenant ID (a GUID)

## What Information Is Shared via the Metadata URL?

The metadata URL provides the following information to your software provider:

- Identity Provider (IdP) Entity ID
- SSO endpoint URLs
- X.509 certificate for signature verification
- Attributes/claims mapping information
- Protocol support information

## Next Steps

After locating and sharing the metadata URL:

1. Confirm with your software provider that they received the information
2. Complete any additional configuration steps required by the software
3. Test the SSO configuration with a test user before rolling out to all users
4. Configure user assignments in the Enterprise Application if needed

## Troubleshooting

If the software provider has trouble processing the metadata URL:

- Try downloading and providing the Federation Metadata XML file instead
- Verify your application is properly configured with SAML in Azure
- Check if your software provider needs specific claim mappings configured

**Note:** This documentation reflects Microsoft Entra ID (formerly Azure AD) as of April 2025. Interface elements and paths may change in future Azure portal updates.

::loom{url="https://www.loom.com/embed/d9ec3ef391514d66916e3bbd6174bb4f"}