---
title: "Okta SAML Configuration Guide"
slug: "microsoft-sso-saml-configuration-guide"
description: "Skykit supports authentication through Microsoft SSO SAML. Follow these steps to get started."
updated: 2026-04-27T18:14:17Z
published: 2026-04-27T18:14:17Z
canonical: "support.skykit.com/microsoft-sso-saml-configuration-guide"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.skykit.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Microsoft SSO SAML Configuration Guide

## 

| This feature is available in the following plans: |
| --- |
| ✖ Base | ✖ Pro | ✔ Enterprise |

This article explains how to configure Microsoft SSO SAML for use with Skykit.

Before You Enable SSO SAMLEnabling SAML affects all assigned users who use the Skykit application. They will need to log in with Skykit using Microsoft SSO.Requires a Microsoft Azure AdministratorCompleting this configuration requires the Microsoft Azure Administrator Role that has permission to fully manage your Microsoft account.Remove Existing Microsoft Azure Enterprise ApplicationsIf you previously allowed or configured a Microsoft Azure Enterprise Application for logging into Skykit, please remove it and create a new one following the configuration steps below. A limitation in Microsoft Azure prevents you from changing to SAML SSO as the authentication method for existing Enterprise Applications.

## Configuration Steps

1. Go to [Azure Portal](https://portal.azure.com/#home).
2. Under **Azure Services,** select **Enterprise applications**.
3. Click on **New application**.
4. Click **Create your own application** at the top
5. For the application name, enter "Skykit SSO SAML".
6. Choose **Integrate any other application you don't find in the gallery (Non-gallery)** for the application type.
7. Go to the application you created in Step 4.
8. In the left navigation panel, select **Overview**.
9. Under the **Getting Started** section, click on **Set up single sign on**.
10. Choose **SAML** as the sign-on method. This will direct you to the SAML configuration page.
11. Under **Manage** in the left navigation panel, select **Single sign-on**.
12. For the **Basic SAML Configuration**, Skykit will provide you with the configuration for the following:
  1. Identifier (Entity ID): msft-skykit-sp
  2. Reply URL (Assertion Consumer Service URL): https://login.skykit.com/__/auth/handler
  3. Sign on URL: [https://accounts.skykit.com/](https://accounts.skykit.com/)
  4. Click the **Save** button at the top, and click the 'X' in the top right corner to close the window
13. For **Attributes & Claims**, update each claim name to update as follows:  
![](https://cdn.document360.io/86c4dfb2-4202-4f4a-97e1-d24441ae8c90/Images/Documentation/Screenshot%202024-05-03%20at%201.53.02%E2%80%AFPM.png)
  1. Unique User Identifier (Name ID): user.userprincipalname
  2. email: user.mail
    1. Remove the **Namespace** value
  3. firstName: user.givenname
    1. Remove the **Namespace** value
  4. name: user.userprincipalname
    1. Keep the **Namespace** value
  5. lastName: user.surname
    1. Remove the **Namespace** value
  6. Click the 'X' in the top right corner to close the claims window after you're finished
14. If you are sent back to the Azure home screen, navigate back to the Enterprise application you created in Step 4.
15. Back on the Single Sign-On setup screen, under **SAML Certificates**, click on "Download" next to **Certificate (Base64)** to download the certificate. Provide this certificate to Skykit.
16. Provide your domain to skykit.
17. Under Step 4 or **Set up** **Skykit SSO SAML**, provide Skykit with the following information:
  1. Login URL
  2. Microsoft Entra Identifier
18. Lastly, add users or groups to the application to enable SSO functionality, under the **Manage** > **Users and Groups** section.

## Send Us Your Configuration

**Please send an email to [support@skykit.com](mailto:support@skykit.com) with the subject "Microsoft SSO SAML Setup", and include:**

- Certificate from Step 15
- Domain name, Login URL and Microsoft Entra Identifier from Step 16 &17

The Skykit Support Team will contact your shortly with further instructions once your configuration has been set.

## User Access & Login Issues

If a user is experiencing issues logging in via SSO despite the integration being active, please verify their status within your **Microsoft Entra ID (formerly Azure AD)** environment.

To log in successfully, users must be explicitly **assigned to the Skykit Enterprise Application** in Entra. If a user is not assigned, the authentication request will fail before reaching Skykit.

If a user is having trouble logging in, you can confirm their access by:

- Navigate to **Enterprise Applications** in the Entra portal
- Select the **Skykit App**
- Verify the specific user or group they belong to is listed under **Users and Groups**

If you encounter any issues or have any questions, please reach out to [support@skykit.com](mailto:support@skykit.com).