Microsoft Entra ID SAML Setup

Configure Microsoft Entra ID (formerly Azure AD) as your SAML identity provider for Doow single sign-on.

See Microsoft's Enable SAML SSO for enterprise applications guide for full details.

Create an enterprise application

1. Sign in to the Microsoft Entra admin center.
2. Go to Identity → Applications → Enterprise applications.
3. Click New application → Create your own application.
4. Enter an app name (e.g., "Doow"), select Integrate any other application you don't find in the gallery, then click Create.

Configure SAML settings

5. Go to Manage → Single sign-on and select SAML.
6. In Basic SAML Configuration, click Edit and configure:
   • Paste the Entity ID from Doow into Identifier (Entity ID).
   • Paste the ACS URL from Doow into Reply URL (Assertion Consumer Service URL).

Configure attributes

7. In Attributes & Claims, click Edit and add:
   • firstName → user.givenname
   • lastName → user.surname
   • email → user.mail

Get IdP values for Doow

8. In SAML Certificates, download Certificate (Base64).
9. In Set up Doow, copy the Login URL and Microsoft Entra Identifier.

Assign users

10. Go to Users and groups and assign users or groups.

Next steps

Return to SAML SSO and complete Step 2 to configure Doow with the IdP values you collected.