---
title: "SAML Integration with Entra ID for Single Sign-On - Indusface WAS"
url: "https://docs.indusface.com/en/article/was-saml-integration-entra-id-single-sign-on"
language: "en"
last_updated: "2025-07-03T07:38:45.782Z"
---

# SAML Integration with Entra ID for Single Sign-On - Indusface WAS

## Introduction 

This document describes the configurations required to access the WAS portal via Entra ID (formerly known as Azure Active Directory) by connecting through SAML settings.

By configuring SAML-based SSO (Single Sign-On) with Entra ID, you enable your users to access the WAS portal using their Entra ID credentials. This removes the need for separate passwords for different applications. Users will only need one account to log in to the WAS portal.

### **Required Inputs from Entra ID**

You will need the following items from Entra ID to configure SAML in Indusface WAS. The steps below explain how to obtain these from Entra ID:

-   Certificate (Base64)
-   Login URL
-   Logout URL

## **Steps to configure SAML**

### Create a New Application

> *Only the admin has access.*

1.  Sign into your Microsoft Entra ID portal as an admin. 
2.  Under Entra ID services, click on the **Microsoft Entra ID button** (or) search for Active Directory using the search bar at the top. 
3.  In the left navigation menu, click **Enterprise applications** under the **Manage** section.
4.  Select **All Applications** > **New Application** > **Create your own application**. 

### Add Application Name

5\. Enter a name for your application under: **What's the name of your app?** 

**6\.** Select **Integrate any other application you don't find in the gallery**, then click **Create**.

7\. Once created, you will be redirected to the application’s page.

![](https://cdn-assets.productfruits.com/9de11abb-2d83-4986-8052-bac71810bfa8)

### Configure WAS Details in Entra ID for SSO 

1.  Navigate to **Set up single sign-on** in your application’s page.
2.  Click **Get Started** as shown in the corresponding screenshot.

![](https://cdn-assets.productfruits.com/49cbe18b-2192-4528-b793-1508859dd5fd)

3\. Choose the SSO method from the available options. 

4\. Select the **SAML** option as suggested in the below screenshot

![](https://cdn-assets.productfruits.com/b4bed644-6889-4f06-ae4a-3b48ef01cd58)

5\. In the **Basic SAML Configuration**, click **Edit** to update the requested URLs:

-   **Identifier (Entity ID)**: Enter the Audience URI (SP Entity ID) you obtained from the WAS portal’s SSO configuration, for example ***https://sso.apptrana.com/saml/metadata.***
-   **Reply URL**: Enter the Single Sign-On URL from the WAS portal’s SSO configuration, for example ***https://sso.apptrana.com/saml/SSO.***

6\.  After entering these values, click **Save** and continue.

![](https://cdn-assets.productfruits.com/17c2765b-f803-4109-9301-9bc2d6f0c635)

![](https://cdn-assets.productfruits.com/9cbd7a5f-efb1-4321-8d13-83d94fe0b94a)

### Add Attributes

1\. Click **Edit** in the **Attributes & Claims** section.

![](https://cdn-assets.productfruits.com/5476e143-0369-4aca-9f28-4c712ef73fca)

2\. Click **Add new claim**.

![](https://cdn-assets.productfruits.com/6d0bc89e-af91-42d2-865c-49b282dbfb4d)

3\. Add the attribute details obtained from the WAS portal’s SSO configuration:

-   **Name**: `use.was_username`
-   **Source attribute**: `use.was_username`

4\. Click **Save** once completed.

![](https://cdn-assets.productfruits.com/da068153-6375-4cc4-9560-91cb0ad4fc35)

### Assign User/Group to the Application

1.  Select the application you created.
2.  Navigate to the **Users and Groups** section.
3.  Click **Add user/group**.
4.  Select and add the users or groups who need access to the application.
5.  Click **Save**. After saving, the Entra ID configuration for SSO is complete.

![](https://cdn-assets.productfruits.com/fe70561a-b1d1-4575-a05b-b066b6b8be7a)

![](https://cdn-assets.productfruits.com/af29e345-0ee1-402c-baa6-3669cb84711b)

**Download the SSO Application Certificates from Entra ID**

Now, as your app is configured, you need to navigate to the Single sign-on application again that you created recently.

1.  Open the Single Sign-On configuration page for your application.
2.  Scroll to the **SAML Certificates** section.
3.  Download both the **Certificate (Base64)** and the **Federation Metadata XML**.
4.  Save these files in an easily accessible location.

![](https://cdn-assets.productfruits.com/8c9e3479-eb49-4fc0-a6e9-797f647480c0)

## Configure Entra ID Details in WAS Portal

1.   Navigate to the **SSO configuration** section under **Settings** in the WAS portal.
2.  Upload the XML file and Certificate (Base64) you downloaded in the previous step.
3.  Allow up to 24 hours for the WAS portal to process the uploaded files.
4.  After processing is complete, the WAS portal will be accessible using your Entra ID account.

![](https://cdn-assets.productfruits.com/e8201874-74ae-4eb8-8e9e-d7c2d0ff1f8d)