# Source: https://docs.datafold.com/security/single-sign-on/saml/examples/microsoft-entra-id-configuration.md

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.datafold.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Microsoft Entra ID

## Azure AD / Entra ID as a SAML Identity Provider

You can create an **Enterprise Application** and use that to configure access to Datafold. Click on **New application** and **Create your own application**.

<Frame>
  <img src="https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/AzureEntraIDSAMLEnterpriseApp-ac80b4305fc06a4a80a45532d718710a.png?fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=f046f4325a41d25294d72b72bc7e7f32" data-og-width="1724" width="1724" data-og-height="1402" height="1402" data-path="images/AzureEntraIDSAMLEnterpriseApp-ac80b4305fc06a4a80a45532d718710a.png" data-optimize="true" data-opv="3" srcset="https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/AzureEntraIDSAMLEnterpriseApp-ac80b4305fc06a4a80a45532d718710a.png?w=280&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=de93f751f26594bf7ceccae6faf8e77e 280w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/AzureEntraIDSAMLEnterpriseApp-ac80b4305fc06a4a80a45532d718710a.png?w=560&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=898fdf7626a40eb02aad3faf01df5ac2 560w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/AzureEntraIDSAMLEnterpriseApp-ac80b4305fc06a4a80a45532d718710a.png?w=840&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=51e99f275914f83519d44b439cc53a96 840w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/AzureEntraIDSAMLEnterpriseApp-ac80b4305fc06a4a80a45532d718710a.png?w=1100&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=6d2345fce559388084ea7c67b993a9f3 1100w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/AzureEntraIDSAMLEnterpriseApp-ac80b4305fc06a4a80a45532d718710a.png?w=1650&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=2ccb5f8f0c12a7e52eee28f086dc3c9b 1650w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/AzureEntraIDSAMLEnterpriseApp-ac80b4305fc06a4a80a45532d718710a.png?w=2500&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=00c5efffa1fc825981f4cafa1e8f7446 2500w" />
</Frame>

**Copy** the **App Federation Metadata Url**.

<Frame>
  <img src="https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/AzureEntraIDSAMLEnterpriseAppInitialConfig-6d5935f0a7efeec4595856d5171c3182.png?fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=c0e3cd95b03d1101df57c76076ad7b50" data-og-width="1334" width="1334" data-og-height="1798" height="1798" data-path="images/AzureEntraIDSAMLEnterpriseAppInitialConfig-6d5935f0a7efeec4595856d5171c3182.png" data-optimize="true" data-opv="3" srcset="https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/AzureEntraIDSAMLEnterpriseAppInitialConfig-6d5935f0a7efeec4595856d5171c3182.png?w=280&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=026b9993d32dfe5bceac3978be48843c 280w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/AzureEntraIDSAMLEnterpriseAppInitialConfig-6d5935f0a7efeec4595856d5171c3182.png?w=560&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=e5ba0a04ae8b5cc94a617c60af845a47 560w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/AzureEntraIDSAMLEnterpriseAppInitialConfig-6d5935f0a7efeec4595856d5171c3182.png?w=840&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=08e9563168b51212b2679b6fa6090e9f 840w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/AzureEntraIDSAMLEnterpriseAppInitialConfig-6d5935f0a7efeec4595856d5171c3182.png?w=1100&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=0b776887156cc1c241e25abbdd399863 1100w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/AzureEntraIDSAMLEnterpriseAppInitialConfig-6d5935f0a7efeec4595856d5171c3182.png?w=1650&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=9661eb58da718e492d8d3a3516c20046 1650w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/AzureEntraIDSAMLEnterpriseAppInitialConfig-6d5935f0a7efeec4595856d5171c3182.png?w=2500&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=39f380af3ef1d5835ffe852ce15a1f5b 2500w" />
</Frame>

Go to `Datafold` and create a new SSO integration. Navigate to **Settings** → **Integrations** → **Add new Integration** → **SAML**.

Paste the **copied** URL into **Identity Provider Metadata URL**.

<Frame>
  <img src="https://mintcdn.com/datafold/9DgdnO4sVNte36u-/images/saml_create-3716c6fe01352ea69c647a7856adf189.png?fit=max&auto=format&n=9DgdnO4sVNte36u-&q=85&s=d664571269b205f66ed0bfb051107a91" data-og-width="2088" width="2088" data-og-height="1452" height="1452" data-path="images/saml_create-3716c6fe01352ea69c647a7856adf189.png" data-optimize="true" data-opv="3" srcset="https://mintcdn.com/datafold/9DgdnO4sVNte36u-/images/saml_create-3716c6fe01352ea69c647a7856adf189.png?w=280&fit=max&auto=format&n=9DgdnO4sVNte36u-&q=85&s=76044b6a16ff8722c525b333d51fbd12 280w, https://mintcdn.com/datafold/9DgdnO4sVNte36u-/images/saml_create-3716c6fe01352ea69c647a7856adf189.png?w=560&fit=max&auto=format&n=9DgdnO4sVNte36u-&q=85&s=fa234c47b6a466e6cba5e6ab39b26651 560w, https://mintcdn.com/datafold/9DgdnO4sVNte36u-/images/saml_create-3716c6fe01352ea69c647a7856adf189.png?w=840&fit=max&auto=format&n=9DgdnO4sVNte36u-&q=85&s=1a6dc91b3981557cbe15b08e888a42aa 840w, https://mintcdn.com/datafold/9DgdnO4sVNte36u-/images/saml_create-3716c6fe01352ea69c647a7856adf189.png?w=1100&fit=max&auto=format&n=9DgdnO4sVNte36u-&q=85&s=93bfe67c8679b40af1d1f92daac66ad2 1100w, https://mintcdn.com/datafold/9DgdnO4sVNte36u-/images/saml_create-3716c6fe01352ea69c647a7856adf189.png?w=1650&fit=max&auto=format&n=9DgdnO4sVNte36u-&q=85&s=642e67455b35e8e364736f993039efbf 1650w, https://mintcdn.com/datafold/9DgdnO4sVNte36u-/images/saml_create-3716c6fe01352ea69c647a7856adf189.png?w=2500&fit=max&auto=format&n=9DgdnO4sVNte36u-&q=85&s=242b9f474139a637af404a556c3746f2 2500w" />
</Frame>

Go to `Azure` and edit the **Basic SAML Configuration** in your Enterprise App.

Copy from Datafold the read-only field **Service Provider ACS URL** and paste it into **Reply URL**.

Copy from Datafold the read-only field **Service Provider Entity ID** and paste it into **Identifier**.

<Frame>
  <img src="https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/AzureEntraIDSAMLEnterpriseAppSAMLConfig-f04cd556cd232163a85a3ff2e47e5e7e.png?fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=914fa717d4ab2ed87ffc04a67c99cf0e" data-og-width="1204" width="1204" data-og-height="1468" height="1468" data-path="images/AzureEntraIDSAMLEnterpriseAppSAMLConfig-f04cd556cd232163a85a3ff2e47e5e7e.png" data-optimize="true" data-opv="3" srcset="https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/AzureEntraIDSAMLEnterpriseAppSAMLConfig-f04cd556cd232163a85a3ff2e47e5e7e.png?w=280&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=6873da5c93e3285802f4baa7f63de352 280w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/AzureEntraIDSAMLEnterpriseAppSAMLConfig-f04cd556cd232163a85a3ff2e47e5e7e.png?w=560&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=8d29d9e0220af510ca1f43012d733c6b 560w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/AzureEntraIDSAMLEnterpriseAppSAMLConfig-f04cd556cd232163a85a3ff2e47e5e7e.png?w=840&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=ac5df0793d3e284d24dc3827f06259c6 840w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/AzureEntraIDSAMLEnterpriseAppSAMLConfig-f04cd556cd232163a85a3ff2e47e5e7e.png?w=1100&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=cbe142abb7edde1201f94f447eb837f3 1100w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/AzureEntraIDSAMLEnterpriseAppSAMLConfig-f04cd556cd232163a85a3ff2e47e5e7e.png?w=1650&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=1559322e5f79844cdfc5b60b54162be4 1650w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/AzureEntraIDSAMLEnterpriseAppSAMLConfig-f04cd556cd232163a85a3ff2e47e5e7e.png?w=2500&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=d457a8b558e1471283770e9c35b5570c 2500w" />
</Frame>

Go to `Datafold` and click **Save** to create the SAML integration.

Next, edit the **Attributes & Claims**. By default, the **Unique User Identifier** is already correctly set to `user.userprincipalname`. If you have multiple domains (i.e., `@datafold.com` and `@datafoldonmicrosoft.com`), please make sure this maps correctly to the email addresses of the users in Datafold.

(Optional step) Add two attributes: `first_name` and `last_name`.

<Frame>
  <img src="https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/AzureEntraIDSAMLEnterpriseAppSAMLAttribute-99692a9fa1d102a1eaa818d36c6b812e.png?fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=0e1e60e7e3feeff95983c959da115188" data-og-width="1146" width="1146" data-og-height="682" height="682" data-path="images/AzureEntraIDSAMLEnterpriseAppSAMLAttribute-99692a9fa1d102a1eaa818d36c6b812e.png" data-optimize="true" data-opv="3" srcset="https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/AzureEntraIDSAMLEnterpriseAppSAMLAttribute-99692a9fa1d102a1eaa818d36c6b812e.png?w=280&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=059871ba16b0dca0df447d4a96345169 280w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/AzureEntraIDSAMLEnterpriseAppSAMLAttribute-99692a9fa1d102a1eaa818d36c6b812e.png?w=560&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=7f1f56994ee73a39f36f9df4b2975e97 560w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/AzureEntraIDSAMLEnterpriseAppSAMLAttribute-99692a9fa1d102a1eaa818d36c6b812e.png?w=840&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=6e96d0da5262399f7a4307635acb2fce 840w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/AzureEntraIDSAMLEnterpriseAppSAMLAttribute-99692a9fa1d102a1eaa818d36c6b812e.png?w=1100&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=3b4ff99a38d1abc00139b71c39756cb6 1100w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/AzureEntraIDSAMLEnterpriseAppSAMLAttribute-99692a9fa1d102a1eaa818d36c6b812e.png?w=1650&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=557c9791479c726fbf9b85cd165804ca 1650w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/AzureEntraIDSAMLEnterpriseAppSAMLAttribute-99692a9fa1d102a1eaa818d36c6b812e.png?w=2500&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=07c12c1155388628296ca370e8230cfd 2500w" />
</Frame>

Finally, edit the **SAML Certificates**. Set the signing option to **Sign SAML response and assertion**.

<Frame>
  <img src="https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/AzureEntraIDSAMLEnterpriseAppCertificates-c4582a0cf51f8dcdae03013810278e00.png?fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=8fd247f9d4d784561868cf9359a16d6f" data-og-width="1338" width="1338" data-og-height="602" height="602" data-path="images/AzureEntraIDSAMLEnterpriseAppCertificates-c4582a0cf51f8dcdae03013810278e00.png" data-optimize="true" data-opv="3" srcset="https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/AzureEntraIDSAMLEnterpriseAppCertificates-c4582a0cf51f8dcdae03013810278e00.png?w=280&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=f1766d6b5ba167419c6bb2d52d398a9e 280w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/AzureEntraIDSAMLEnterpriseAppCertificates-c4582a0cf51f8dcdae03013810278e00.png?w=560&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=d0f09c10f614a3ea19e5b0641ecf2fac 560w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/AzureEntraIDSAMLEnterpriseAppCertificates-c4582a0cf51f8dcdae03013810278e00.png?w=840&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=8faa2bc002e73892f79c8ebd6fcabc79 840w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/AzureEntraIDSAMLEnterpriseAppCertificates-c4582a0cf51f8dcdae03013810278e00.png?w=1100&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=1962a7fd24c571a4aa7a9fa0fdfc9454 1100w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/AzureEntraIDSAMLEnterpriseAppCertificates-c4582a0cf51f8dcdae03013810278e00.png?w=1650&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=9be749d54d9e3d8a19fa7f9f991d4321 1650w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/AzureEntraIDSAMLEnterpriseAppCertificates-c4582a0cf51f8dcdae03013810278e00.png?w=2500&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=9cea58d918d93857cba205444fedbbaa 2500w" />
</Frame>

After you made sure you are added as a user to the Enterprise Application, log out from Datafold. Click on **Test** under **Test single sign-on with DatafoldSSO**.

## Synchronize user with Datafold \[Optional]

This step is essential if you want to ensure that users from your organization are disabled if they are no longer assigned to the configured Microsoft Entra App.

1. Navigate to App registrations → API permissions.
2. Add the following permissions: `Group.Read.All` and `User.ReadBasic.All`.
   2.1 Click `Add a permission`.
   2.2 Select Microsoft Graph.

<Frame>
  <img src="https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/1-e2efd77a0267ffe5f9fb14ef6be44c1f.png?fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=a720a15fa9d640f9391f8fab7c9211c0" data-og-width="1480" width="1480" data-og-height="866" height="866" data-path="images/1-e2efd77a0267ffe5f9fb14ef6be44c1f.png" data-optimize="true" data-opv="3" srcset="https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/1-e2efd77a0267ffe5f9fb14ef6be44c1f.png?w=280&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=a25702f6a99c94c2cdbf5bd3127ce974 280w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/1-e2efd77a0267ffe5f9fb14ef6be44c1f.png?w=560&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=7f562bc34d34d354980b285c455ceffe 560w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/1-e2efd77a0267ffe5f9fb14ef6be44c1f.png?w=840&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=5a683ac0aa1d92a51cfc323bf09f5b92 840w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/1-e2efd77a0267ffe5f9fb14ef6be44c1f.png?w=1100&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=a97a7878468733590510d7cf6974dcda 1100w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/1-e2efd77a0267ffe5f9fb14ef6be44c1f.png?w=1650&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=a151bee4d4843e1a242d16b9305ff61e 1650w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/1-e2efd77a0267ffe5f9fb14ef6be44c1f.png?w=2500&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=6ff7f11fc5d973b8473801e0e60fa825 2500w" />
</Frame>

2.3 Select application permissions and add the required permissions.

<Frame>
  <img src="https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/2-00a764fe8abf4ef520abeaf7ae07d49e.png?fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=13b9a24078632afb55d8c665f4e40f1f" data-og-width="1514" width="1514" data-og-height="834" height="834" data-path="images/2-00a764fe8abf4ef520abeaf7ae07d49e.png" data-optimize="true" data-opv="3" srcset="https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/2-00a764fe8abf4ef520abeaf7ae07d49e.png?w=280&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=e47cf793035c8d3adda0dfe576e73645 280w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/2-00a764fe8abf4ef520abeaf7ae07d49e.png?w=560&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=58930216ba894ce2ab91a95e363b2413 560w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/2-00a764fe8abf4ef520abeaf7ae07d49e.png?w=840&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=4b0469c605fbcbcb6a8eef7c5e2b2eb1 840w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/2-00a764fe8abf4ef520abeaf7ae07d49e.png?w=1100&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=5bd6f5ac487bed1e3ca3dd12ff79537a 1100w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/2-00a764fe8abf4ef520abeaf7ae07d49e.png?w=1650&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=bf2f7ac7b77c5a1414f53807864bb5f4 1650w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/2-00a764fe8abf4ef520abeaf7ae07d49e.png?w=2500&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=c9310570c1f792009f9c0ab656ad63f6 2500w" />

  <img src="https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/3-eadbef3fd2f9c1d0326ed8a9721c16c2.png?fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=fd83b4f6265f71cc3ca338d47104ada1" data-og-width="1506" width="1506" data-og-height="398" height="398" data-path="images/3-eadbef3fd2f9c1d0326ed8a9721c16c2.png" data-optimize="true" data-opv="3" srcset="https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/3-eadbef3fd2f9c1d0326ed8a9721c16c2.png?w=280&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=651036156b7cc97e6ffaa7ddf75bfb19 280w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/3-eadbef3fd2f9c1d0326ed8a9721c16c2.png?w=560&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=8735ba819b72607bb5961d95e2c4bc0d 560w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/3-eadbef3fd2f9c1d0326ed8a9721c16c2.png?w=840&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=de9b2a3b4ec77e482e56fcc78863d98c 840w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/3-eadbef3fd2f9c1d0326ed8a9721c16c2.png?w=1100&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=698c12aa77ead7b1ea0bc165d2d64fc5 1100w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/3-eadbef3fd2f9c1d0326ed8a9721c16c2.png?w=1650&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=f16f68e97dda83d07e0d6bcef17fa297 1650w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/3-eadbef3fd2f9c1d0326ed8a9721c16c2.png?w=2500&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=c895f2b2fd4f783b242f8fefc05d6306 2500w" />
</Frame>

3. Grant admin consent.

<Frame>
  <img src="https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/4-40f90f212a27572e669806bc36325bc7.png?fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=fb0aa1f158f2aec6d6f4a1b3a081c20f" data-og-width="1580" width="1580" data-og-height="784" height="784" data-path="images/4-40f90f212a27572e669806bc36325bc7.png" data-optimize="true" data-opv="3" srcset="https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/4-40f90f212a27572e669806bc36325bc7.png?w=280&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=51ee70d63cf050166ae395368bde47c5 280w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/4-40f90f212a27572e669806bc36325bc7.png?w=560&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=1d169c59f4d35f2c981ebd100042d765 560w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/4-40f90f212a27572e669806bc36325bc7.png?w=840&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=8e13134c745e095000a314f5ca732224 840w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/4-40f90f212a27572e669806bc36325bc7.png?w=1100&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=97f61ab8401a3e7d45458fe8c4beec31 1100w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/4-40f90f212a27572e669806bc36325bc7.png?w=1650&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=1a76d9ba1937a7f05fbd2a810e902925 1650w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/4-40f90f212a27572e669806bc36325bc7.png?w=2500&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=114422090662fc1ae07dc5a095f9e79c 2500w" />
</Frame>

4. You should now see a <Icon icon="square-check" /> next to the permissions.

<Frame>
  <img src="https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/5-257e23569930de31a6168ac10aaf5bf3.png?fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=f28ea21f758290a2876d69fa51dc2da7" data-og-width="1544" width="1544" data-og-height="482" height="482" data-path="images/5-257e23569930de31a6168ac10aaf5bf3.png" data-optimize="true" data-opv="3" srcset="https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/5-257e23569930de31a6168ac10aaf5bf3.png?w=280&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=b1d0875d532398d95008632958452b2e 280w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/5-257e23569930de31a6168ac10aaf5bf3.png?w=560&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=fa7943196a09d31f37b403fd4c99e35f 560w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/5-257e23569930de31a6168ac10aaf5bf3.png?w=840&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=4d7c28a4ea0369882cace5789d860e33 840w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/5-257e23569930de31a6168ac10aaf5bf3.png?w=1100&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=936d8a3fa927bb9d5f8ee3fcce5df48f 1100w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/5-257e23569930de31a6168ac10aaf5bf3.png?w=1650&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=5d926e9b710be602ffa685f6bdb84c27 1650w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/5-257e23569930de31a6168ac10aaf5bf3.png?w=2500&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=382fda0f951a59164bf7de038bd8a908 2500w" />
</Frame>

5. Generate a secret so that Datafold can interact with the API.
   5.1 Click `Certificates & secrets`.

<Frame>
  <img src="https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/6-015ef3a0d51e4ee205d6bd5d5c888e8d.png?fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=53b9bd989e8c0fabbe436dfd3464a1c1" data-og-width="2044" width="2044" data-og-height="446" height="446" data-path="images/6-015ef3a0d51e4ee205d6bd5d5c888e8d.png" data-optimize="true" data-opv="3" srcset="https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/6-015ef3a0d51e4ee205d6bd5d5c888e8d.png?w=280&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=e2f726689f11faddc7f0bc477b7b4d99 280w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/6-015ef3a0d51e4ee205d6bd5d5c888e8d.png?w=560&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=5852df798cfd0208f65cb8e1ebbe44ce 560w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/6-015ef3a0d51e4ee205d6bd5d5c888e8d.png?w=840&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=74d8b57a302f04acc6c885f302c1e89c 840w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/6-015ef3a0d51e4ee205d6bd5d5c888e8d.png?w=1100&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=6744fd8c2c8e689994b987a5da8540b1 1100w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/6-015ef3a0d51e4ee205d6bd5d5c888e8d.png?w=1650&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=336ff98fb4f3de13b872314e2b344a31 1650w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/6-015ef3a0d51e4ee205d6bd5d5c888e8d.png?w=2500&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=d9532ee1fda03cf024f2c06244453f5c 2500w" />
</Frame>

5.2 Click `New client secret`.
5.3 Type in a description and click `Add`.

<Frame>
  <img src="https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/7-a95118698bae900f1620b47905433fc4.png?fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=552b5f52d806aa8b90681cc449584711" data-og-width="1042" width="1042" data-og-height="478" height="478" data-path="images/7-a95118698bae900f1620b47905433fc4.png" data-optimize="true" data-opv="3" srcset="https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/7-a95118698bae900f1620b47905433fc4.png?w=280&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=45b2016d891ab27ff93834e318e42a05 280w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/7-a95118698bae900f1620b47905433fc4.png?w=560&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=4f061905fce7d16a58067712917b8d75 560w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/7-a95118698bae900f1620b47905433fc4.png?w=840&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=d350b8860f9056026379653cf89f984e 840w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/7-a95118698bae900f1620b47905433fc4.png?w=1100&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=e72580916c2efb756d0f800bcf59c5e5 1100w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/7-a95118698bae900f1620b47905433fc4.png?w=1650&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=029758725feefdfd5ebe1bac525614bf 1650w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/7-a95118698bae900f1620b47905433fc4.png?w=2500&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=5fb5b80a5c36cd7dd9b354cca544c872 2500w" />
</Frame>

6. Go to `Datafold` and navigate to **Settings** → **Integrations** → **SSO** → **Add new Integration** and select the Microsoft Entra ID Logo.

<Frame>
  <img src="https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/8-bfcf9d1f0679293415dad2a9b7c5ef6c.png?fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=53e7d8df3ed9743261d59ffb842bd934" data-og-width="2072" width="2072" data-og-height="622" height="622" data-path="images/8-bfcf9d1f0679293415dad2a9b7c5ef6c.png" data-optimize="true" data-opv="3" srcset="https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/8-bfcf9d1f0679293415dad2a9b7c5ef6c.png?w=280&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=695f6ad6681d3b195df963e5d8e038bd 280w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/8-bfcf9d1f0679293415dad2a9b7c5ef6c.png?w=560&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=34c3175a4ce27ee1ffe2a24c0d2c78db 560w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/8-bfcf9d1f0679293415dad2a9b7c5ef6c.png?w=840&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=13861a8cce2a92c8c2026838abb41191 840w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/8-bfcf9d1f0679293415dad2a9b7c5ef6c.png?w=1100&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=121071fbb10fbb61183e0480edfd08ae 1100w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/8-bfcf9d1f0679293415dad2a9b7c5ef6c.png?w=1650&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=7c2fa73221f65be599a4a290d503bf35 1650w, https://mintcdn.com/datafold/7pWtpSckJi2T0xZR/images/8-bfcf9d1f0679293415dad2a9b7c5ef6c.png?w=2500&fit=max&auto=format&n=7pWtpSckJi2T0xZR&q=85&s=2782c0fb51f3237343f075d977442562 2500w" />
</Frame>

7. Paste in the four required fields:<br />
   7.1 Tenant ID - [you can find this in the overview page](https://learn.microsoft.com/en-us/entra/fundamentals/how-to-find-tenant)<br />
   7.2 Navigate to the application overview<br />
   7.3 Copy Application ID and paste it into Client Id<br />
   7.4 Copy the secret we created in the previous steps and paste it into Client Secret<br />
   7.5 Navigate to the enterprise application and copy Object ID and paste it into Principal Id.<br />
   7.6 Click **Save** to create the integration.<br />

If the update is successful, it means that the integration is valid. Users that do not have access to the configured application will be disabled and logged out in at most one hour.