---
updatedAt: 2026-05-08T17:21:05.000Z
agentTools:
  projectIndex: https://cloud.docs.tamr.com/llms.txt
---

# Configuring Single Sign-on with Microsoft Entra ID (Azure Active Directory)

Before configuring SSO with Microsoft Entra ID, contact Tamr Support (<help@tamr.com>) for the following information:

* Identifier (Entity ID).  (This value is the audience restriction provided by Tamr, and begins with the string `urn:auth0:`.)
* Reply URL (Assertion Consumer Service URL)
* Sign on URL. Note that this value is the same as the Reply URL.

After configuring SSO with Microsoft Entra ID, send the following information to Tamr Support:

* Certificate (Base64)
* Login URL

**To configure SSO with Microsoft Entra ID:**

1. Sign into your Azure admin portal

2. In the left menu, select **Microsoft Entra ID**.

3. Navigate to **Manage > Enterprise applications**.

[block:image]{"images":[{"image":["https://files.readme.io/492421ef0c5bdc7c3582f38ed4c1463fbf761521306b4bda5b731b137199e68d-enterpriseAppMenu.png","",""],"align":"center","sizing":"300px"}]}[/block]

4. In the **Enterprise applications** page, select **New application** .

[block:image]{"images":[{"image":["https://files.readme.io/380930578c274ccaa3b4431a2efb7bdf3ed7b84e8688058262a5175ad258bd70-azure_sso_newAppoption.png","",""],"align":"center"}]}[/block]

5. Select **Create your own application** .

[block:image]{"images":[{"image":["https://files.readme.io/33600f6a605006db69da562a8e33c4cf13039fe07f68fc5c05a6a60012be552a-azure_sso_create_yourapp.png","",""],"align":"center"}]}[/block]

6. Configure the  **Create your own application** settings as follows:

   1. Enter a name for the application. For example: **tamr-sso-app**

   2. Select **Integrate any other application you don't find in the gallery (Non-gallery)**

   3. Select **Create** .

[block:image]{"images":[{"image":["https://files.readme.io/ab31447069a6f70799efece4d56218663ec83d7f7f2f6d480444102b5f337059-azure_sso_create_app.png","",""],"align":"center"}]}[/block]

   <br />

7. In the newly created application page, navigate to **Manage > Single sign-on**.

8. Select **SAML** in the Select a single sign-on method.

[block:image]{"images":[{"image":["https://files.readme.io/cef150b06fa3d6508bf53fb28f8da676f6b97fda16df7654517eca543944cf93-sso_azure_saml.png","",""],"align":"center"}]}[/block]

9. In the **Set up Single Sign-On with SAML** page, select the **Edit** icon in the **Basic SAML configuration** section.

[block:image]{"images":[{"image":["https://files.readme.io/45d13fcb8e68fd4a2918a4ef1b8429b252ea61ae0c5b7b445deaa46798e0ff78-azure_setupBasicSAML.png","",""],"align":"center"}]}[/block]

10. Configure the following:
    1. Enter the **Identifier (Entity ID)** value provided by Tamr.  This value is the audience restriction provided by Tamr and begins with the string **urn:auth0:**
    2. Enter the  **Reply URL (Assertion Consumer Service URL)** and **Sign on URL** values provided by Tamr. The URLs for these settings are the same.

11. Select the **Edit** icon in the **Attributes & Claims** section.

12. Select **Add new claim**  and then add the following fields:

    1. Email

[block:image]{"images":[{"image":["https://files.readme.io/9ea548655b4abda667cdb8fc905661c1cdaf24e3a97e73d867789be1f8d3908c-azure_sso_email.png","",""],"align":"center"}]}[/block]

2. User Id

[block:image]{"images":[{"image":["https://files.readme.io/b7fd8899fdd694d372a20606b6b297e73cb9cbfa7891e51bb65d8d343664f7d6-sso_userID_azure.png","",""],"align":"center"}]}[/block]

3. Family Name

[block:image]{"images":[{"image":["https://files.readme.io/0626dadad4929319c49ebb182215d586ed0d94c8ae978c2d0ec2e0d0eed4fdc1-azure_sso_lastName.png","",""],"align":"center"}]}[/block]

4. Given Name

[block:image]{"images":[{"image":["https://files.readme.io/a4817c6eab5b3255aaafe01b84873e4d62444e12c653d3fca8768df76ba07abe-ssoAzureGiveName.png","",""],"align":"center"}]}[/block]

5. Name

[block:image]{"images":[{"image":["https://files.readme.io/a739a2c174a9a5b9b8cdc343d7e95b763a295be6127ef0047a41d10e6d8802df-azure_sso_principalname.png","",""],"align":"center"}]}[/block]

6. Delete all the default claims created under the **Additional Claims** section.

7. Confirm that the SAML application configuration looks similar to the following:

[block:image]{"images":[{"image":["https://files.readme.io/08362a6b55c78ea5989f13bab304d6b36fb6015366c649a3a8c2984b2561bffc-azure_saml_config.png","",""],"align":"center"}]}[/block]

14. Send the following information to Tamr Support (<help@tamr.com>) to complete the SSO configuration:

    1. Download the **Certificate (Base64)**  from the **SAML Certificates**  section.

    2. Copy the **Login URL** from **Set up \<application\_name>** section.

[block:image]{"images":[{"image":["https://files.readme.io/aa0689b2840eef0cefab954f3d2a4b7b007374610bf38bf8485ea7fd8f73e1e3-azure_sso_valuesForTamr.png","",""],"align":"center"}]}[/block]