# Set up single sign-on (SSO) for Amplitude using Microsoft Azure Active Directory

Configure SAML single sign-on between Amplitude and Microsoft Azure AD.

Source: https://amplitude.com/docs/admin/single-sign-on/azure-active-directory

---

On this page

- [Before you begin](#before-you-begin)
- [Set up SSO for Amplitude using Microsoft Azure Active Directory](#set-up-sso-for-amplitude-using-microsoft-azure-active-directory)

# Set up single sign-on (SSO) for Amplitude using Microsoft Azure Active Directory

Amplitude provides a single sign-on integration with Microsoft Azure Active Directory for customers on Scholarship, Growth, or Enterprise plans.

## Before you begin

For general information about SSO, refer to [SSO in Amplitude](/docs/admin/single-sign-on/sso).

To set up SSO, you must be an org admin for your Amplitude organization. You must also be able to configure Azure Active Directory for your organization in Microsoft Azure.

## Set up SSO for Amplitude using Microsoft Azure Active Directory

To configure SSO for Amplitude using Azure Active Directory:

1. From the [Azure portal](https://portal.azure.com), navigate to the Azure Active Directory section.

2. Open the *Enterprise applications* sub-section.

3. Click *+ New application* to add a new application.

4. Search for Amplitude in the app gallery. From the results list, select Amplitude and click *Add* in the bottom-right of the app summary.

5. Click *Single sign-on* to open the SSO app settings. Then enter the identifier and the reply URL in the appropriate text fields.

Find these values under *Entity ID* and *Assertion Consumer Service URL*, respectively, in Amplitude's SSO settings.

6. In the *User identifier* field, select *user.mail* from the drop-down list.

7. Save the changes. Then click *Metadata XML* to download the metadata file.

8. In Amplitude, navigate to *Settings > Organization settings > Access & SSO Setting > Single Sign-On Settings* and upload the metadata file. Choose Microsoft Azure Active Directory as the *Identity Provider*.

9. Save your changes to enable SSO.

Was this helpful?

<!--$-->

<!--/$-->