Amplitude provides a single sign-on integration with Microsoft Azure Active Directory for customers on Scholarship, Growth, or Enterprise plans.

## Before you begin

For general information about SSO, refer to [SSO in Amplitude](/docs/admin/single-sign-on/sso).

To set up SSO, you must be an org admin for your Amplitude organization. You must also be able to configure Azure Active Directory for your organization in Microsoft Azure.

## Set up SSO for Amplitude using Microsoft Azure Active Directory

To configure SSO for Amplitude using Azure Active Directory:

1. From the [Azure portal](https://portal.azure.com), navigate to the Azure Active Directory section.

2. Open the _Enterprise applications_ sub-section.

3. Click _+ New application_ to add a new application.

4. Search for Amplitude in the app gallery. From the results list, select Amplitude and click _Add_ in the bottom-right of the app summary.

5. Click _Single sign-on_ to open the SSO app settings. Then enter the identifier and the reply URL in the appropriate text fields.

Find these values under _Entity ID_ and _Assertion Consumer Service URL_, respectively, in Amplitude's SSO settings.

6. In the _User identifier_ field, select _user.mail_ from the drop-down list.

7. Save the changes. Then click _Metadata XML_ to download the metadata file.

8. In Amplitude, navigate to _Settings > Organization settings > Access & SSO Setting > Single Sign-On Settings_ and upload the metadata file. Choose Microsoft Azure Active Directory as the _Identity Provider_.
9. Save your changes to enable SSO.