Setup Cloud Director SAML Using Microsoft Entra (Azure AD)
This article explains how to configure a Cloud Director tenant to use Microsoft Entra for authentication using SAML.
- Sign In to your Cloud Director Tenant using your existing account.
![](https://kb.vsystems.com/hs-fs/hubfs/image-png-May-28-2024-10-49-38-6012-PM.png?width=500&height=341&name=image-png-May-28-2024-10-49-38-6012-PM.png)
- Click on Administration.
![](https://kb.vsystems.com/hs-fs/hubfs/image-png-May-28-2024-10-55-54-7678-PM.png?width=500&height=262&name=image-png-May-28-2024-10-55-54-7678-PM.png)
- Expand Identity Providers > click on SAML.
![](https://kb.vsystems.com/hs-fs/hubfs/image-png-May-28-2024-10-57-22-3348-PM.png?width=500&height=215&name=image-png-May-28-2024-10-57-22-3348-PM.png)
- Ensure the Certificate isn't expired (If it is expired, click Regenerate Certificate) > Click Configure.
![](https://kb.vsystems.com/hs-fs/hubfs/image-png-May-28-2024-10-59-19-1733-PM.png?width=500&height=419&name=image-png-May-28-2024-10-59-19-1733-PM.png)
- Click Retrieve Metadata. A XML file should download.
![](https://kb.vsystems.com/hs-fs/hubfs/image-png-May-28-2024-11-03-16-1906-PM.png?width=500&height=287&name=image-png-May-28-2024-11-03-16-1906-PM.png)
- Log into Microsoft Entra at https://entra.microsoft.com.
- Expand Identity > expand Applications > click on Enterprise applications.
![](https://kb.vsystems.com/hs-fs/hubfs/image-png-May-28-2024-11-07-01-9099-PM.png?width=500&height=346&name=image-png-May-28-2024-11-07-01-9099-PM.png)
- In the top menu, click on New Application.
![](https://kb.vsystems.com/hs-fs/hubfs/image-png-May-28-2024-11-09-42-3634-PM.png?width=500&height=144&name=image-png-May-28-2024-11-09-42-3634-PM.png)
- Click on Create your own application.
![](https://kb.vsystems.com/hs-fs/hubfs/image-png-May-29-2024-12-21-47-6083-AM.png?width=500&height=159&name=image-png-May-29-2024-12-21-47-6083-AM.png)
- Enter a name for the application and select Integrate any other applicationyou don't find in the gallery (Non-gallery).
![](https://kb.vsystems.com/hs-fs/hubfs/image-png-May-29-2024-12-24-19-2722-AM.png?width=500&height=304&name=image-png-May-29-2024-12-24-19-2722-AM.png)
- Click on Create.
![](https://kb.vsystems.com/hs-fs/hubfs/image-png-May-29-2024-12-26-15-1836-AM.png?width=107&height=49&name=image-png-May-29-2024-12-26-15-1836-AM.png)
- Click on Set up single sign on.
![](https://kb.vsystems.com/hs-fs/hubfs/image-png-May-29-2024-12-29-58-3234-AM.png?width=500&height=273&name=image-png-May-29-2024-12-29-58-3234-AM.png)
- Click on SAML.
![](https://kb.vsystems.com/hs-fs/hubfs/image-png-May-29-2024-12-32-21-5807-AM.png?width=500&height=233&name=image-png-May-29-2024-12-32-21-5807-AM.png)
- Click on Upload metadata file.
![](https://kb.vsystems.com/hs-fs/hubfs/image-png-May-29-2024-12-37-34-3297-AM.png?width=500&height=108&name=image-png-May-29-2024-12-37-34-3297-AM.png)
- Select the XML file downloaded from Step 5 > Click Add.
![](https://kb.vsystems.com/hs-fs/hubfs/image-png-May-29-2024-12-39-48-1742-AM.png?width=688&height=156&name=image-png-May-29-2024-12-39-48-1742-AM.png)
- Click on Save.
![](https://kb.vsystems.com/hs-fs/hubfs/image-png-May-29-2024-12-41-19-1934-AM.png?width=313&height=90&name=image-png-May-29-2024-12-41-19-1934-AM.png)
- In the SAML Certificates section, click on Download next to Federation Metadata XML. It will download a XML file.
![](https://kb.vsystems.com/hs-fs/hubfs/image-png-May-29-2024-04-11-25-0303-AM.png?width=500&height=178&name=image-png-May-29-2024-04-11-25-0303-AM.png)
- Under Manage, click on Users and groups > click on Add user/group.
![](https://kb.vsystems.com/hs-fs/hubfs/image-png-May-29-2024-03-02-27-1995-AM.png?width=500&height=288&name=image-png-May-29-2024-03-02-27-1995-AM.png)
- Select the users/groups that should be able to authenticate with Cloud Director > click Assign.
![](https://kb.vsystems.com/hs-fs/hubfs/image-png-May-29-2024-03-05-00-3812-AM.png?width=500&height=254&name=image-png-May-29-2024-03-05-00-3812-AM.png)
- Go back to Cloud Director, click on Configure again.
![](https://kb.vsystems.com/hs-fs/hubfs/image-png-May-29-2024-01-07-43-3787-AM.png?width=500&height=468&name=image-png-May-29-2024-01-07-43-3787-AM.png)
- Go to the Identity Provider tab > slide the Use SAML Identity Provider to on.
![](https://kb.vsystems.com/hs-fs/hubfs/image-png-May-29-2024-01-09-19-0698-AM.png?width=500&height=292&name=image-png-May-29-2024-01-09-19-0698-AM.png)
- Click on SELECT METADATA XML File.
![](https://kb.vsystems.com/hs-fs/hubfs/image-png-May-29-2024-01-49-23-9523-AM.png?width=500&height=292&name=image-png-May-29-2024-01-49-23-9523-AM.png)
- Upload the XML file downloaded from Step 17. Click on Save.
![](https://kb.vsystems.com/hs-fs/hubfs/image-png-May-29-2024-01-55-04-1969-AM.png?width=500&height=295&name=image-png-May-29-2024-01-55-04-1969-AM.png)
- Expand Access Control > click on Users > click on Import Users.
![](https://kb.vsystems.com/hs-fs/hubfs/image-png-May-29-2024-01-56-49-6736-AM.png?width=500&height=217&name=image-png-May-29-2024-01-56-49-6736-AM.png)
- In the Import Users window, enter the email addresses of the users who will have access (These must be allowed in the Enterprise Application in step 19) > from the Assign Role, select a role to assign to the users > click Save.
![](https://kb.vsystems.com/hs-fs/hubfs/image-png-May-29-2024-02-01-14-5456-AM.png?width=560&height=680&name=image-png-May-29-2024-02-01-14-5456-AM.png)