---
agentTools:
  projectIndex: https://help.localizejs.com/llms.txt
---

# SAML SSO Setup for Microsoft Azure Active Directory

Allow your users to login to Localize using Microsoft Azure Active Directory as the Identity Provider

With SAML SSO for Microsoft Azure Active Directory, your users will be able to login with their Microsoft login, simplifying and securing their login to the Localize dashboard.

[Click here](https://help.localizejs.com/docs/saml-sso) for a general overview of the SAML SSO setup and login processes.

[block:api-header]
{
  "title": "Setting up SAML SSO"
}
[/block]

The setup is similar for different IdPs. Below we provide the detailed steps for setting up a SAML SSO application using Microsoft Azure Active Directory.

### Step 1: Enable SAML SSO in Localize

First you'll need to enable the use of SAML SSO across your Localize Organization.

1. Navigate to the [Settings](https://app.localizejs.com/settings/organization/company) page under the **Manage Organization** menu item.
2. Check the box next to **Enable SAML SSO**

[block:image]
{
  "images": [
    {
      "image": [
        "https://files.readme.io/ea0b737-SAML_SSO_Enable.png",
        "SAML SSO Enable.png",
        1370,
        378,
        "#f7f9f9"
      ]
    }
  ]
}
[/block]

This will display important information for Localize as the **Service Provider** (SP). You'll use this info later in the process.

### Step 2: Create your SAML Application in Microsoft Azure Active Directory

Next you'll need to use the information provided by Localize in the SSO Settings panel to create and set up your SAML application in Microsoft Azure Active Directory.

1. Open a new browser tab and login to <a href="https://portal.azure.com/#home" class="external-link" target="_blank">Microsoft Azure</a>
2. Click the **Manage Azure Active Directory** option
3. Click **Create a tenant**
   a. By default **Azure Active Directory** will be selected
4. Click **Next configuration**
5. Enter **Organization name** and **Initial domain name**
6. Click **Next**
   a. A **Validation Passed** message will appear on the final screen.
7. Click **Create**.
   a. It will take a few minutes to create the tenant.
8. In the side menu of the tenant you just created, click **Enterprise application**.
9. Click **+ New application** near the top of the screen.
10. Select the **Non-gallery application** option
11. Type a name for the application and click **Add**
12. In the screen that appears, select the **Set up single sign on** option
13. Select **SAML**
14. Click **Edit** in the **Basic SAML Configuration** panel.
15. In the **Basic SAML Configuration** popup, enter the following information by copying-and-pasting from the Localize tab.

[block:parameters]
{
  "data": {
    "h-0": "Field",
    "h-1": "Value",
    "0-0": "Identifier (Entity ID)",
    "1-0": "ACS URL",
    "2-0": "Sign on URL",
    "1-1": "(Copy and paste from the Localize settings page)",
    "0-1": "Localize-SSO",
    "h-2": "Description",
    "0-2": "The unique Localize SP entity ID.",
    "1-2": "The Localize endpoint that's responsible for receiving and parsing your SAML assertion.",
    "2-1": "https://app.localizejs.com",
    "2-2": "The URL at Localize that starts the SAML login process."
  },
  "cols": 3,
  "rows": 3
}
[/block]

18. Click **Edit** in the **User Attributes & Claims** panel.
19. Choose **Name ID** as the **Claim name** and **user.email** for **Value**
20. Click **Save**. Remove or keep other additional claims.
21. Click the **Download** button for the **Federation Metadata XML** in the **SAML Signing Certificate** panel and name it **metadata.xml**.
22. Copy the **Login URL** from the **Set up {Application\_Name}** panel.

### Step 3: Enter the IdP Details in Localize

1. Switch to the Localize browser tab
2. Paste the **Login URL** endpoint into the **IdP URL** field.
3. Open the **metadata.xml** file that you downloaded, copy the contents, and paste them into the **Metadata** text box.
4. Click **Save**

### Step 4: Finish your SAML App Setup

1. Switch back to the Microsoft Azure browser tab.
2. Click **Users and groups** in the side menu.
3. Click **+ Add user** near the top of the screen.
4. Select and assign all relevant users.
   a. Make sure that the email addresses your users use to sign in to Localize match the email addresses they use to sign into Microsoft Azure.