SAML integration with Microsoft Azure

This guide explains how to configure SAML single sign-on (SSO) between ClouDNS and Microsoft Entra ID (formerly Azure Active Directory). Follow the steps below to create the application, exchange federation metadata, and test access.

Step 1: Create a New Enterprise Application

Sign in to the Microsoft Entra admin center and navigate to Entra ID > Enterprise apps > All applications.

Enterprise apps > All applications > New application

Select Create your own application.

Enter a name for your application.

Ensure the following option is selected:

OptionValue
Application type Integrate any other application you don't find in the gallery (Non-gallery)

Click Create to proceed.

Step 2: Configure Single Sign-On (SSO)

In the newly created application, go to:

Single sign-on

Select the SAML option.

Step 3: Basic SAML Configuration

In the Basic SAML Configuration section, click Edit.

Enter the following values:

SettingValue
Identifier (Entity ID) https://www.cloudns.net
Reply URL (Assertion Consumer Service URL) https://www.cloudns.net

Click Save to apply these settings.

Step 4: Download and Upload Federation Metadata

Download the Federation Metadata XML file from the SAML Certificates section in Microsoft Entra ID.

Log in to ClouDNS and upload the XML file in the SAML configuration popup.

Step 5: Update the ACS URL

After uploading the Federation Metadata XML file to ClouDNS, an ACS URL will be generated.

Return to the Basic SAML Configuration in Microsoft Entra ID and click Edit again.

Update the Reply URL with the generated ACS URL and keep the Identifier unchanged:

SettingValue
Identifier (Entity ID) https://www.cloudns.net
Reply URL (Assertion Consumer Service URL) https://www.cloudns.net/saml/user/XXXXX
Replace this example with the exact ACS URL generated by ClouDNS; XXXXX is a placeholder.

Click Save to apply the updated Reply URL.

Step 6: Configure the signing option

In the SAML Certificates section, click Edit next to Token signing certificate.

Set Signing Option to Sign SAML response and Signing Algorithm to SHA-256, then click Save.

SettingValue
Signing Option Sign SAML response
Signing Algorithm SHA-256

Step 7: Upload the Updated Metadata XML

Download the updated Metadata XML file from Microsoft Entra ID.

Return to ClouDNS, upload the new XML file in the SAML configuration popup, and click Add to complete the setup.

Step 8: Assign Users and Groups

In Microsoft Entra ID, go to Users and groups within the application.

Assign access to the relevant team members to enable their login through SSO.

Step 9: Test the Application

Please allow Microsoft Entra ID some time to update and then use the Test this application feature in Microsoft Entra ID to verify the integration.

Once the test is successful, your team members will be able to log in to ClouDNS using Microsoft Entra ID SSO.

If the permissions for this particular user are set correctly, you will be able to see the configured app in Microsoft My Apps. Once you click on the app, you will be automatically logged in to your account at ClouDNS.


Last modified: 2026-10-16
We value your privacy! We use cookies to enhance your browsing experience, and analyze our traffic. By clicking "Accept All", you consent to our use of cookies. Cookie Policy.