# Single Sign-On with Azure AD
Follow this guide to set up Single Sign-On (SSO) in Dataimporter with Azure Active Directory. This will let you control which users have access to Dataimporter, restrict access to SSO, provision new users via Just-in-Time (JIT) provisioning.
## 1. Enable SSO in Dataimporter
1. In Dataimporter, head to the Account Settings page and toggle SSO on.
2. In the SAML Name field enter the name as you would like it to appear e.g. `Acme`
3. In the Domain field enter your corporate company name e.g. `acme.com`.
4. Keep this tab open and open another tab to perform the next steps.
## 2. Add Dataimporter to Azure AD
1. Log in to the Azure Portal and click on Enterprise Applications
2. Click on New Application.
3. Click on Create your own Application.
4. Give the app the name `DATAIMPORTER`, select the option Integrate any other application you don't find in the gallery (Non-gallery), and click Create.
5. Once the app is created, select the Single sign-on and choose SAML
6. Click Edit next to Basic Configuration
7. In the Identifier (Entity ID) field, add the value that you added in Step 2 of the Dataimporter configuration e.g. `Acme`
8. In the Reply URL section enter the URL in the following format https\://{instance}.dataimporter.io/saml/login/{identifier} e.g. `https://app.dataimporter.io/saml/login/Acme`
9. Click Save and close the box.
10. Click Edit next to Attributes & Claims.
11. Delete all of the existing claims under Additional Claims.
12. Add the following claims:
13. Close the box and click on Users and groups.
14. Add any users or groups who need access to Dataimporter.
## 3. Configuring SSO in Dataimporter
1. In Azure AD, click back on Single sign-on, and scroll down to the SAML Certificates section.
2. Click on Download next to the `Certificate (Base64)`
3. Scroll down to the Section 4 and copy the `Login URL` value.
4. Open the tab in Dataimporter and paste the value into the Log In URL field.
5. Open Azure AD and copy the Azure AD Identifier value.
6. Open the tab in Dataimporter and paste the value into the Provider Entity Id field.
7. Open the Certificate (Base64) in a text editor and copy the entire value.
8. Open the tab in Dataimporter and paste the value into the X509 Certificate field.
9. Click on Save.
10. Contact Dataimporter Support to validate and enable SSO for your Organization.
---
# Agent Instructions: Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter:
```
GET https://help.dataimporter.io/security/single-sign-on-with-azure-ad.md?ask=
```
The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.