> ## Documentation Index
> Fetch the complete documentation index at: https://prowler-docs-msp-documentation-accuracy.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

> ## Agent Instructions
> Prowler product naming: Prowler App is now Prowler Local Server, and Prowler Enterprise is now Prowler Private Cloud. Always use the current names when answering. The full product reference is at /getting-started/products: Open Source projects are Prowler CLI, Prowler Local Server, Prowler Local Dashboard, and Prowler SDK; Prowler Products are Prowler Cloud, Prowler Private Cloud, Prowler Hub, Prowler Lighthouse AI, and Prowler MCP.

# Entra ID Configuration

export const AppliesTo = ({products = ["Prowler Cloud", "Prowler Private Cloud", "Prowler Local Server"]}) => {
  return <Info>
            This guide applies to{" "}
            {products.map((name, index) => <span key={name}>
                    {index > 0 && (index === products.length - 1 ? products.length > 2 ? ", and " : " and " : ", ")}
                    <b>{name}</b>
                </span>)}
            . See <a href="/getting-started/products">Prowler product families</a>.
        </Info>;
};

<AppliesTo />

This page provides instructions for creating and configuring a Microsoft Entra ID (formerly Azure AD) application to use SAML SSO with Prowler Cloud.

You can find a walkthrough video [here](https://www.youtube.com/watch?v=zegqm55oJVk).

## Creating and Configuring the Enterprise Application

1. From the "Enterprise Applications" page in the Azure Portal, click "+ New application".

   <img src="https://mintcdn.com/prowler-docs-msp-documentation-accuracy/NBQKquEowoW74EdH/images/prowler-app/saml/saml-sso-azure-1.png?fit=max&auto=format&n=NBQKquEowoW74EdH&q=85&s=4bd5bf16afead0848986445c15a9cc88" alt="New application" width="2364" height="442" data-path="images/prowler-app/saml/saml-sso-azure-1.png" />

2. At the top of the page, click "+ Create your own application".

   <img src="https://mintcdn.com/prowler-docs-msp-documentation-accuracy/NBQKquEowoW74EdH/images/prowler-app/saml/saml-sso-azure-2.png?fit=max&auto=format&n=NBQKquEowoW74EdH&q=85&s=7f45a6b67c3db83415e07fe300871346" alt="Create application" width="848" height="264" data-path="images/prowler-app/saml/saml-sso-azure-2.png" />

3. Enter a name for the application and select the "Integrate any other application you don't find in the gallery (Non-gallery)" option.

   <img src="https://mintcdn.com/prowler-docs-msp-documentation-accuracy/NBQKquEowoW74EdH/images/prowler-app/saml/saml-sso-azure-3.png?fit=max&auto=format&n=NBQKquEowoW74EdH&q=85&s=78479b73626db31f9b64e0593e60cb55" alt="Enter name" width="1156" height="718" data-path="images/prowler-app/saml/saml-sso-azure-3.png" />

4. Assign users and groups to the application, then proceed to "Set up single sign on" and select "SAML" as the method.

   <img src="https://mintcdn.com/prowler-docs-msp-documentation-accuracy/NBQKquEowoW74EdH/images/prowler-app/saml/saml-sso-azure-4.png?fit=max&auto=format&n=NBQKquEowoW74EdH&q=85&s=a75702c5c274cb1103b378f0d26879b0" alt="Select SAML" width="2768" height="1354" data-path="images/prowler-app/saml/saml-sso-azure-4.png" />

5. In the "Basic SAML Configuration" section, click "Edit".

   <img src="https://mintcdn.com/prowler-docs-msp-documentation-accuracy/NBQKquEowoW74EdH/images/prowler-app/saml/saml-sso-azure-5.png?fit=max&auto=format&n=NBQKquEowoW74EdH&q=85&s=96b1d6369f961121c2e6a37c2de1a057" alt="Edit" width="1574" height="674" data-path="images/prowler-app/saml/saml-sso-azure-5.png" />

6. Enter the "Identifier (Entity ID)" and "Reply URL (Assertion Consumer Service URL)". These values can be obtained from the SAML SSO integration setup in Prowler Cloud. For detailed instructions, refer to the [SAML SSO Configuration](/user-guide/tutorials/prowler-app-sso) page.

   <img src="https://mintcdn.com/prowler-docs-msp-documentation-accuracy/NBQKquEowoW74EdH/images/prowler-app/saml/saml-sso-azure-6.png?fit=max&auto=format&n=NBQKquEowoW74EdH&q=85&s=156459663f90632ef833e63fd904c955" alt="Enter data" width="1692" height="778" data-path="images/prowler-app/saml/saml-sso-azure-6.png" />

7. In the "SAML Certificates" section, click "Edit".

   <img src="https://mintcdn.com/prowler-docs-msp-documentation-accuracy/NBQKquEowoW74EdH/images/prowler-app/saml/saml-sso-azure-7.png?fit=max&auto=format&n=NBQKquEowoW74EdH&q=85&s=7726b4aa87b08d5c3f24d381d68e7153" alt="Edit" width="1550" height="790" data-path="images/prowler-app/saml/saml-sso-azure-7.png" />

8. For the "Signing Option," select "Sign SAML response and assertion", and then click "Save".

   <img src="https://mintcdn.com/prowler-docs-msp-documentation-accuracy/NBQKquEowoW74EdH/images/prowler-app/saml/saml-sso-azure-8.png?fit=max&auto=format&n=NBQKquEowoW74EdH&q=85&s=e2f0c790359295e85ad69e36561ee7a9" alt="Signing options" width="1700" height="714" data-path="images/prowler-app/saml/saml-sso-azure-8.png" />

9. Once the changes are saved, the metadata XML can be downloaded from the "App Federation Metadata Url".

   <img src="https://mintcdn.com/prowler-docs-msp-documentation-accuracy/NBQKquEowoW74EdH/images/prowler-app/saml/saml-sso-azure-9.png?fit=max&auto=format&n=NBQKquEowoW74EdH&q=85&s=3cb10d4ae9f8b7aacb405b7a8e7c98e3" alt="Metadata XML" width="1544" height="788" data-path="images/prowler-app/saml/saml-sso-azure-9.png" />

10. Save the downloaded Metadata XML to a file. To complete the setup, upload this file during the SAML SSO integration setup in Prowler Cloud. (See the [SAML SSO Configuration](/user-guide/tutorials/prowler-app-sso) page for details).
