--- updatedAt: 2025-09-19T00:40:39.000Z agentTools: projectIndex: https://docs.synthesia.io/llms.txt --- # Set up Entra/Azure for SSO Configuration ## Step 1: Request SSO Setup Start by reaching out to your Customer Success Manager to ensure your current plan allows SSO setup. Then loop in the Support Team () and ask them to kickstart the process. ## Step 2: Configure the connection between your Identity Provider (IdP) and Synthesia’s SSO service provider 1. After the support team sends you the WorkOS setup link, please click on it and follow the Admin Portal instructions 2. You will see a list of the IdP providers available. Choose the one you need and follow the corresponding step-by-step guidelines on how to configure the IdP settings. Once done, you will be able to test your SSO integration with that identity provider.

## Step 3: Create an Enterprise Application 1. Sign in to the [Microsoft Entra admin center⁠](https://entra.microsoft.com/). 2. In the left navigation menu, expand the *Identity* section. 3. Expand the *Applications* sub-section. 4. Select the *Enterprise applications* tab and click `New application`.

5. On the *Browse Microsoft Entra Gallery* page, click `Create your own application`.

6. Enter an appropriate app name, such as "Synthesia". 7. Select the `Integrate any other application you don’t find in the gallery (Non-gallery)` option, then click `Create`. ## Step 4: Basic SAML Configuration 1. In the left navigation menu, select the `Single sign-on` tab and click on the `SAML` tile.

2. The *Setup Single Sign-On with SAML* page will open. 3. Locate the *Basic SAML Configuration* section and click on the `Edit` icon in the top right corner of the step.

4. Copy the *Identifier (Entity ID)* and the *Reply URL (Assertion Consumer Service URL)* from the WorkOS guide setup link you received and paste them into the *Basic SAML Configuration* panel. 5. Click `Save`, then close the edit panel.

## Step 5: Configure Attributes and Claims 1. Locate the *Attributes & Claims* section and click on the `Edit` icon in the top right corner of the step.

## Step 6: Assign Users and Groups 1. In the left navigation menu, select the `Users and groups` tab, then click `Add user/group`.

2. Select appropriate users and groups to add to the SAML application.

3. When finished, click `Assign` to add the selected users and groups to your SAML application.

## Step 7: Add an Application Logo Optionally, you can add a logo to serve as the app’s entry point on the Microsoft Entra My Apps portal. Including a logo helps users easily identify and access Synthesia. 1. In the left navigation menu, select the `Properties` tab and locate the *Logo* field. 2. Click on the blue folder icon to upload the logo image, then click `Save`.

## Step 8: Set Identity Provider Metadata 1. Choose either `Dynamic configuration` (recommended) or `Manual configuration` (enter your identity provider settings). 2. In the left navigation menu, select the `Single sign-on` tab. 3. Scroll down to the *SAML Certificates* section and locate the *App Federation Metadata Url*. 4. Click on the field to copy the URL.

5. Paste the value into the *Identity provider metadata URL* field in the WorkOS setup guide you received to continue to the next step.

## Step 9: Test Single Sign-On Test signing in with Entra ID to verify that the single sign-on connection was configured correctly. When you finish the setup, you should get the *SSO successful test* notification, which would mean that the connection between WorkOS and your IdP was established:

## Step 10: Enforce SSO After a successful test, please [reach out to the Synthesia support team](support@synthesia.io), who will send you a test login link to try accessing your account with SSO and after you confirm a successful attempt, they will be able to enforce your SSO in production. Be sure to include: * A validation that the tests worked * A list of domain names managed by your IdP (e.g. synthesia.io) # What’s Next * [How can I restrict access to videos using SSO? - Synthesia Knowledge Base](https://help.synthesia.io/en/articles/11173480-how-can-i-restrict-access-to-videos-using-sso-beta)