--- title: "SSO Configuration Steps: Microsoft Entra ID (Azure Active Directory)" description: Set up SAML SSO for K1x using Microsoft Entra ID (Azure AD). Configure Entity ID and ACS URL, map required NameID/email, first name, and last name claims, then send your Entra federation metadata XML to K1x for activation. --- [Skip to content](https://support.k1x.io/sso-configuration-steps-entra-azure-active-directory#main-content) [Submit A Support Ticket](https://support.k1x.io/kb-tickets/new?hsLang=en-us) [Client portal](https://support.k1x.io/tickets?hsLang=en-us) [![Group 16](https://support.k1x.io/hs-fs/hubfs/Group%2016.png?width=75&height=75&name=Group%2016.png)](https://support.k1x.io/?hsLang=en-us) - [Knowledge Base](https://support.k1x.io/) Open main navigation Close main navigation - [Knowledge Base](https://support.k1x.io/) - [Submit A Support Ticket](https://support.k1x.io/kb-tickets/new) - [Client portal](https://support.k1x.io/tickets) How can we help? - There are no suggestions because the search field is empty. 1. [K1x Knowledge Base](https://support.k1x.io/?hsLang=en-us) 2. [General](https://support.k1x.io/general?hsLang=en-us) 3. [Account Management - SSO & Okta](https://support.k1x.io/general?hsLang=en-us#account-management-sso-okta) May 27, 2026 # SSO Configuration Steps: Microsoft Entra ID (Azure Active Directory) ## Use this guide to configure SAML SSO between Microsoft Entra ID (formerly Azure AD) and K1x. #### What you’ll need from K1x Before you begin, you need the **K1x SAML service provider (SP) values**: - **Identifier (Entity ID)** - **Reply URL (ACS URL)** If you don’t have these values, contact your K1x technical contact/support and request **K1x SAML SP metadata**. --- #### K1x SAML requirements (important) K1x requires the following in the SAML assertion: - **NameID**: must match the user’s **email address** - **Required claims to log in**: - **Email (ie. 'emailaddress')** - **First Name ( ie. 'givenname')** - **Last Name (ie. 'surname')** --- #### Step 1: Create the Enterprise Application in Entra 1. In the **Microsoft Entra admin center**, go to **Enterprise applications**. 2. Select **New application**. 3. Choose **Create your own application**. 4. Name the app (example: `K1x SSO`). 5. Select **Integrate any other application you don't find in the gallery (Non-gallery)**. 6. Click **Create**. --- #### Step 2: Enable SAML SSO 1. In your new application, go to **Single sign-on**. 2. Choose **SAML**. --- #### Step 3: Configure Basic SAML settings 1. In **Basic SAML Configuration**, click **Edit**. 2. Set: - **Identifier (Entity ID)** = *(from K1x)* - **Reply URL (Assertion Consumer Service URL)** = *(from K1x)* 3. Click **Save**. --- #### Step 4: Configure Attributes & Claims (NameID + required claims) 1. On the **SAML** configuration page, go to **Attributes & Claims** and click **Edit**. 2. #### Set NameID to email 3. #### Set **Unique User Identifier (Name ID)** to an email source: - #### **Source attribute**: `user.mail` - #### If `user.mail` is not populated in your tenant, use: `user.userprincipalname` #### Ensure these required claims are present Make sure the SAML token includes these attributes (names may vary, but the values must map correctly): | Required User Data | Recommended Entra source attribute | | --- | --- | | emailaddress | `user.mail` (fallback: `user.userprincipalname`) | | givenname | `user.givenname` | | surname | `user.surname` | Click **Save** when finished. --- #### Step 5: Download the signing certificate and IdP Federation Metadata XML 1. On the **SAML** page, locate **SAML Signing Certificate** andthe **Federation Metadata** file. 2. Download **Certificate (Base64)**. 3. Download the **Federation Metadata XML** (sometimes labeled **Federation Metadata XML** or available via a **metadata URL**). --- #### Step 6: Collect Entra SSO details to send to K1x Send the following to your K1x technical contact/support: - **Login URL** - **Microsoft Entra Identifier** *(formerly “Azure AD Identifier”)* - **Certificate (Base64)** *(downloaded above)* - **Federation Metadata XML file** (attached) - (Optional but helpful) The **metadata URL**, if your tenant provides one Tip: These values are found on the same **SAML** configuration page in Entra. --- #### Step 7: Assign users/groups in Entra (required for testing) If you’re using assignment-based access (common default): 1. Go to **Enterprise applications** → your K1x app. 2. Select **Users and groups**. 3. Add the users/groups who should be able to sign in. --- #### Test SSO After K1x confirms the configuration is complete, test with a user who: - Is assigned to the app in Entra - Has mail or `userprincipalname` populated - Has `givenname` and `surname` populated --- #### Troubleshooting - **User gets an access/assignment error in Entra**: Ensure the user/group is assigned to the Enterprise App. - **User created but missing profile fields in K1x**: Verify the SAML assertion includes **First Name**, **Last Name**, and **Email** claims. - **Email claim/NameID is blank**: Many tenants don’t populate `user.mail`. Use `user.userprincipalname` as the source for NameID and email claim. - **Sign-in fails after “successful” configuration**: Re-check that the **Identifier (Entity ID)** and **Reply URL (ACS URL)** match the K1x values exactly (no trailing slashes or typos). ![Screenshot 2026-04-24 at 9.16.07 AM](https://support.k1x.io/hs-fs/hubfs/Screenshot%202026-04-24%20at%209.16.07%20AM.png?width=198&height=120&name=Screenshot%202026-04-24%20at%209.16.07%20AM.png)   - [General](https://support.k1x.io/general?hsLang=en-us#main-content) - [Account Management - SSO & Okta](https://support.k1x.io/general?hsLang=en-us#account-management-sso-okta) - [FAQ](https://support.k1x.io/general?hsLang=en-us#faq) - [Release Notes](https://support.k1x.io/general?hsLang=en-us#release-notes) - [K1 Aggregator](https://support.k1x.io/k1-aggregator?hsLang=en-us#main-content) - [Getting Started & Administration](https://support.k1x.io/k1-aggregator?hsLang=en-us#getting-started-administration) - [Core Workflows](https://support.k1x.io/k1-aggregator?hsLang=en-us#core-workflows) - [Reader Extraction & Document Upload](https://support.k1x.io/k1-aggregator?hsLang=en-us#reader-extraction-document-upload) - [Aggregator Modules - Investments](https://support.k1x.io/k1-aggregator?hsLang=en-us#aggregator-modules-investments) - [Aggregator Modules - Foreign Forms](https://support.k1x.io/k1-aggregator?hsLang=en-us#aggregator-modules-foreign-forms) - [Aggregator Modules - Reports and Exports](https://support.k1x.io/k1-aggregator?hsLang=en-us#aggregator-modules-reports-and-exports) - [K-1 Aggregator FAQ](https://support.k1x.io/k1-aggregator?hsLang=en-us#k-1-aggregator-faq) - [Integrations - CCH Axcess](https://support.k1x.io/k1-aggregator?hsLang=en-us#integrations-cch-axcess) - [Integrations - GoSystem](https://support.k1x.io/k1-aggregator?hsLang=en-us#integrations-gosystem) - [Integrations - UltraTax, Profx, OIT](https://support.k1x.io/k1-aggregator?hsLang=en-us#integrations-ultratax-profx-oit) - [Integrations - All Other](https://support.k1x.io/k1-aggregator?hsLang=en-us#integrations-all-other) - [990 Tracker](https://support.k1x.io/990-tracker?hsLang=en-us#main-content) - [990 Tracker FAQ](https://support.k1x.io/990-tracker?hsLang=en-us#990-tracker-faq) - [Federal Forms](https://support.k1x.io/990-tracker?hsLang=en-us#federal-forms) - [Federal Forms - 990-T](https://support.k1x.io/990-tracker?hsLang=en-us#federal-forms-990-t) - [Federal Forms - Form 990](https://support.k1x.io/990-tracker?hsLang=en-us#federal-forms-form-990) - [Federal Forms - Form 990 - Form 990 Schedules - Schedule A](https://support.k1x.io/990-tracker?hsLang=en-us#federal-forms-form-990-form-990-schedules-schedule-a) - [Federal Forms - Form 990 - Form 990 Schedules - Schedule B](https://support.k1x.io/990-tracker?hsLang=en-us#federal-forms-form-990-form-990-schedules-schedule-b) - [Federal Forms - Form 990 - Form 990 Schedules - Schedule C](https://support.k1x.io/990-tracker?hsLang=en-us#federal-forms-form-990-form-990-schedules-schedule-c) - [Federal Forms - Form 990 - Form 990 Schedules - Schedule D](https://support.k1x.io/990-tracker?hsLang=en-us#federal-forms-form-990-form-990-schedules-schedule-d) - [Federal Forms - Form 990 - Form 990 Schedules - Schedule K](https://support.k1x.io/990-tracker?hsLang=en-us#federal-forms-form-990-form-990-schedules-schedule-k) - [Federal Forms - Form 990 - Form 990 Schedules - Schedule R](https://support.k1x.io/990-tracker?hsLang=en-us#federal-forms-form-990-form-990-schedules-schedule-r) - [Federal Forms - Form 990 EZ](https://support.k1x.io/990-tracker?hsLang=en-us#federal-forms-form-990-ez) - [Federal Forms - Form 990 PF](https://support.k1x.io/990-tracker?hsLang=en-us#federal-forms-form-990-pf) - [Federal Forms - Other Federal Forms](https://support.k1x.io/990-tracker?hsLang=en-us#federal-forms-other-federal-forms) - [Electronic Filing](https://support.k1x.io/990-tracker?hsLang=en-us#electronic-filing) - [Modules](https://support.k1x.io/990-tracker?hsLang=en-us#modules) - [Modules - Conflict of Interest](https://support.k1x.io/990-tracker?hsLang=en-us#modules-conflict-of-interest) - [Modules - Master Compensation Module](https://support.k1x.io/990-tracker?hsLang=en-us#modules-master-compensation-module) - [State Forms](https://support.k1x.io/990-tracker?hsLang=en-us#state-forms) - [State Forms - Arizona](https://support.k1x.io/990-tracker?hsLang=en-us#state-forms-arizona) - [State Forms - Massachussets](https://support.k1x.io/990-tracker?hsLang=en-us#state-forms-massachussets) - [State Forms - Mississippi](https://support.k1x.io/990-tracker?hsLang=en-us#state-forms-mississippi) - [State Forms - New Mexico](https://support.k1x.io/990-tracker?hsLang=en-us#state-forms-new-mexico) - [State Forms - West Virginia](https://support.k1x.io/990-tracker?hsLang=en-us#state-forms-west-virginia) - [Troubleshooting](https://support.k1x.io/990-tracker?hsLang=en-us#troubleshooting) - [Troubleshooting - Federal](https://support.k1x.io/990-tracker?hsLang=en-us#troubleshooting-federal) - [Troubleshooting - Federal - Validation Errors](https://support.k1x.io/990-tracker?hsLang=en-us#troubleshooting-federal-validation-errors) - [Troubleshooting - Federal - Validation Errors - Form 990](https://support.k1x.io/990-tracker?hsLang=en-us#troubleshooting-federal-validation-errors-form-990) - [Troubleshooting - Federal - Validation Errors - Form 990-T](https://support.k1x.io/990-tracker?hsLang=en-us#troubleshooting-federal-validation-errors-form-990-t) - [Troubleshooting - Federal - Validation Errors - Form 990-PF](https://support.k1x.io/990-tracker?hsLang=en-us#troubleshooting-federal-validation-errors-form-990-pf) - [Troubleshooting - Federal - Validation Errors - Other Federal Forms](https://support.k1x.io/990-tracker?hsLang=en-us#troubleshooting-federal-validation-errors-other-federal-forms) - [Troubleshooting - Federal - Rejection Errors - Form 990](https://support.k1x.io/990-tracker?hsLang=en-us#troubleshooting-federal-rejection-errors-form-990) - [Troubleshooting - Federal - Rejection Errors - Form 990-T](https://support.k1x.io/990-tracker?hsLang=en-us#troubleshooting-federal-rejection-errors-form-990-t) - [Troubleshooting - Federal - Rejection Errors - Form 990-PF](https://support.k1x.io/990-tracker?hsLang=en-us#troubleshooting-federal-rejection-errors-form-990-pf) - [Troubleshooting - Federal - Rejection Errors - Other Federal Forms](https://support.k1x.io/990-tracker?hsLang=en-us#troubleshooting-federal-rejection-errors-other-federal-forms) - [Troubleshooting - State - Validation Errors](https://support.k1x.io/990-tracker?hsLang=en-us#troubleshooting-state-validation-errors) - [Troubleshooting - State - Rejection Errors](https://support.k1x.io/990-tracker?hsLang=en-us#troubleshooting-state-rejection-errors) - [North Caolina](https://support.k1x.io/990-tracker?hsLang=en-us#north-caolina) - [Forms & Schedules](https://support.k1x.io/990-tracker?hsLang=en-us#forms-schedules) - [K1 Creator](https://support.k1x.io/k1-creator?hsLang=en-us#main-content) - [Core Workflows](https://support.k1x.io/k1-creator?hsLang=en-us#core-workflows) [![k1x logo](https://support.k1x.io/hs-fs/hubfs/k1x%20logo.webp?width=65&height=65&name=k1x%20logo.webp "k1x logo")](https://k1x.io) Privacy Policy | Legal | © 2024 K1x. All Rights Reserved. Patented/Patent-pending AI automation technology | The Digital K-1 Exchange and Digital K-1 Filetype. US2022/0405453 | AI-powered engine to extract data for K-1 PDF. US 2021/0082062 | C-TRAC. US 2010/0010849 1 High Street Court, Morristown, NJ 07960