---
title: "SAML Integration with Entra ID for Single Sign-On  - AppTrana WAF"
url: "https://docs.indusface.com/en/article/waf-saml-integration-entra-id-single-sign-on"
language: "en"
last_updated: "2025-08-01T12:01:19.400Z"
---

# SAML Integration with Entra ID for Single Sign-On  - AppTrana WAF

## **Introduction**  

This document describes the configurations required to access the AppTrana WAF portal via Entra ID (Formerly known as Azure Active Directory) by connecting through SAML settings. 

By configuring SAML-based SSO (Single Sign-On) with Entra ID, you enable your users to access the AppTrana WAF portal using their Entra ID credentials. This removes the need for separate passwords for different applications. Users will only need one account to log in to the AppTrana WAF portal. 

### **Required Inputs from Entra ID** 

You will need the following items from Entra ID to configure SAML in AppTrana WAF. The steps below explain how to obtain these from Entra ID: 

-   Certificate (Base64) 
-   Login URL 
-   Logout URL 

## **Steps to configure SAML** 

### **Create a New Application** 

> *Only the admin has access.* 

1.   Sign into your Microsoft Entra ID portal as an admin.  
2.  Under Entra ID services, click on the **Microsoft Entra ID button** (or) search for Active Directory using the search bar at the top.  
3.  In the left navigation menu, click **Enterprise applications** under the **Manage** section. 
4.  Select **All Applications** > **New Application** > **Create your own application**.  

###  **Add Application Name** 

5\. Enter a name for your application under: **What's the name of your app?**  

6\. Select **Integrate any other application you don't find in the gallery**, then click **Create**. 

Once created, you will be redirected to the application’s page.

![](https://cdn-assets.productfruits.com/8ed13c76-dc82-4598-b5e1-eb0bc1af672d)

## **Configure AppTrana WAF Details in Entra ID for SSO**  

1\. Navigate to **Set up single sign-on** in your application’s page. 

2\. Click **Get Started** as shown in the corresponding screenshot. 

![](https://cdn-assets.productfruits.com/6674160c-3915-4fa3-9a85-5e31258ec07b)

 3. Choose the SSO method from the available options.  

4\. Select the **SAML** option as suggested in the below screenshot:  

![](https://cdn-assets.productfruits.com/f1ae4847-e782-43ab-a200-cca7b437ceae)

5\. In the **Basic SAML Configuration**, click **Edit** to update the requested URLs: 

-   **Identifier (Entity ID)**: Enter the Audience URI (SP Entity ID) you obtained from the AppTrana WAF portal’s SSO configuration, for example https://sso.apptrana.com/saml/metadata. 
-   **Reply URL**: Enter the Single Sign-On URL from the WAF portal’s SSO configuration, for example https://sso.apptrana.com/saml/SSO. 

6\. After entering these values, click **Save** and continue. 

![](https://cdn-assets.productfruits.com/cbc61441-26ca-4b37-b9c5-c002393debd7)

![](https://cdn-assets.productfruits.com/015ed01d-9c3c-43ee-9567-9c3262f33491)

### Add Attributes 

1\. Click **Edit** in the **Attributes & Claims** section. 

![](https://cdn-assets.productfruits.com/42f41117-f538-49db-88b4-3c083a8319ac)

2\. Click **Add new claim**. 

![](https://cdn-assets.productfruits.com/1a40015f-d354-4c21-8930-e438be994f56)

3\. Add the attribute details obtained from the WAF portal’s SSO configuration: 

-   **Name:** use.was\_username (example) 
-   **Source attribute:** use.was\_username (example)

4\. Click **Save** once completed. 

![](https://cdn-assets.productfruits.com/41b14a54-eb48-4006-a71e-660e8a7b40e2)

### **Assign User/Group to the Application** 

1.   Select the application you created. 
2.  Navigate to the **Users and Groups** section. 
3.  Click **Add user/group**. 
4.  Select and add the users or groups who need access to the application. 
5.  Click **Save**. After saving, the Entra ID configuration for SSO is complete. 

![](https://cdn-assets.productfruits.com/03d81abc-9991-49e8-8693-dd0ffa60d81e)

![](https://cdn-assets.productfruits.com/1c6bb902-7870-457d-b00c-1897113921d2)

### **Download the SSO Application Certificates from Entra ID** 

Now, as your app is configured, you need to navigate to the Single sign-on application again that you created recently. 

1.  Open the Single Sign-On configuration page for your application. 
2.  Scroll to the **SAML Certificates** section. 
3.  Download both the **Certificate (Base64)** and the **Federation Metadata XML**. 
4.  Save these files in an easily accessible location. 

![](https://cdn-assets.productfruits.com/144cbb6b-6601-4da9-a0e2-ef463bb0da03)

## **Configure Entra ID Details in AppTrana WAF Portal** 

**Steps in the WAF Portal** 

1.  Navigate to the **SSO Configuration** section under **Settings** in the WAF portal. 

![](https://cdn-assets.productfruits.com/8247bc5e-df12-4c55-94e1-dbe37ac4c1da)

2\. Enable the **Single Sign On Tab**

![](https://cdn-assets.productfruits.com/ac60f358-d16e-45eb-adea-1c0b25c70f64)

3\. Upload the **XML file** and the **Certificate (Base64)** you downloaded earlier. 

![](https://cdn-assets.productfruits.com/edff5dc3-7ec0-48a6-96dc-1d52a2bae879)

4\. Allow up to **24 hours** for the WAF portal to process the uploaded files. 

5\. Once processing is complete, you will be able to access the WAF portal using your **Entra ID account**. 

![](https://cdn-assets.productfruits.com/9369ba7f-3d48-4f29-bd8c-77bc76088209)