# Does Dynatrace SaaS support SSO via AzureAD? **URL:** \ **Category:** Cloud platforms\ **Tags:** saml, azure, sso\ **Created:** [February 3, 2018, 1:44am UTC](https://community.dynatrace.com/t/does-dynatrace-saas-support-sso-via-azuread/10952 "2018-02-03T01:44:30Z")\ **Posts on this page:** 13\ **Page:** 2
**Author:** ![james\_stephens](https://avatars.discourse-cdn.com/v4/letter/j/ed8c4c/32.png) [@james\_stephens](https://community.dynatrace.com/u/james_stephens)\ **Post date:** [March 26, 2019, 3:46pm UTC](https://community.dynatrace.com/t/does-dynatrace-saas-support-sso-via-azuread/10952/21 "2019-03-26T15:46:23Z")
Any updates here? ---
**Author:** ![gerald\_1](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/gerald_1/32/18514_2.png) [@gerald\_1](https://community.dynatrace.com/u/gerald_1)\ **Post date:** [March 27, 2019, 10:07am UTC](https://community.dynatrace.com/t/does-dynatrace-saas-support-sso-via-azuread/10952/22 "2019-03-27T10:07:39Z")
We’ll support it in April. ---
**Author:** ![Yosi\_Neuman](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/yosi_neuman/32/9845_2.png) [@Yosi\_Neuman](https://community.dynatrace.com/u/Yosi_Neuman)\ **Post date:** [April 3, 2019, 5:08am UTC](https://community.dynatrace.com/t/does-dynatrace-saas-support-sso-via-azuread/10952/23 "2019-04-03T05:08:43Z")
Hi [@Gerald H.](https://answers.dynatrace.com/users/13196/view.html) Q1 2019 already finished and Q2 is with us… is there a target version for this feature? Yos ---
**Author:** ![khoros\_anonymous](https://avatars.discourse-cdn.com/v4/letter/k/f9ae1b/32.png) [@khoros\_anonymous](https://community.dynatrace.com/u/khoros_anonymous)\ **Post date:** [April 10, 2019, 6:37am UTC](https://community.dynatrace.com/t/does-dynatrace-saas-support-sso-via-azuread/10952/24 "2019-04-10T06:37:39Z")
Hey Guys, We are MLC/NAB are also after Dynatrace SAAS, SSO. Though our usecase is not via AzureAD, but on-prem AD. Is it still tracking mid-late April? Keen to do this. ---
**Author:** ![gerald\_1](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/gerald_1/32/18514_2.png) [@gerald\_1](https://community.dynatrace.com/u/gerald_1)\ **Post date:** [April 10, 2019, 8:36am UTC](https://community.dynatrace.com/t/does-dynatrace-saas-support-sso-via-azuread/10952/25 "2019-04-10T08:36:19Z")
Yes, it the dates c communicated are still valid. Once the feature is live, I’ll provide an official blog post in our Dynatrace blog. ---
**Author:** ![gerald\_1](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/gerald_1/32/18514_2.png) [@gerald\_1](https://community.dynatrace.com/u/gerald_1)\ **Post date:** [April 24, 2019, 6:58pm UTC](https://community.dynatrace.com/t/does-dynatrace-saas-support-sso-via-azuread/10952/26 "2019-04-24T18:58:51Z")
Hello, SAML federation is now GA. Please check out the [SAML setup instructions](https://www.dynatrace.com/support/help/how-to-use-dynatrace/data-privacy-and-security/configuration/manage-users-and-groups-with-saml/). Gerald ---
**Author:** ![kevin\_goff](https://avatars.discourse-cdn.com/v4/letter/k/e99b99/32.png) [@kevin\_goff](https://community.dynatrace.com/u/kevin_goff)\ **Post date:** [April 24, 2019, 9:34pm UTC](https://community.dynatrace.com/t/does-dynatrace-saas-support-sso-via-azuread/10952/27 "2019-04-24T21:34:17Z")
We are using Azure. After uploading the file from Azure for the metadata we see this error:Please provide a valid SAML 2.0 document containing an IDPSSODescriptor, POST single logout URL, and emailAddress NameIDFormat. ---
**Author:** ![gerald\_1](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/gerald_1/32/18514_2.png) [@gerald\_1](https://community.dynatrace.com/u/gerald_1)\ **Post date:** [April 25, 2019, 12:04pm UTC](https://community.dynatrace.com/t/does-dynatrace-saas-support-sso-via-azuread/10952/28 "2019-04-25T12:04:04Z")
Kevin, looks like your IdP metadata is missing some entries that we expect. Can you please reach out to support or talk to us via chat? Thanks, Gerald ---
**Author:** ![patrik\_arefjard](https://avatars.discourse-cdn.com/v4/letter/p/59ef9b/32.png) [@patrik\_arefjard](https://community.dynatrace.com/u/patrik_arefjard)\ **Post date:** [May 8, 2019, 11:04am UTC](https://community.dynatrace.com/t/does-dynatrace-saas-support-sso-via-azuread/10952/29 "2019-05-08T11:04:09Z")
We did get the same error as Kevin, did you manage to solve this problem? ---
**Author:** ![kevin\_goff](https://avatars.discourse-cdn.com/v4/letter/k/e99b99/32.png) [@kevin\_goff](https://community.dynatrace.com/u/kevin_goff)\ **Post date:** [May 8, 2019, 3:29pm UTC](https://community.dynatrace.com/t/does-dynatrace-saas-support-sso-via-azuread/10952/30 "2019-05-08T15:29:16Z")
I have an open support ticket but no replies yet. ---
**Author:** ![patrik\_arefjard](https://avatars.discourse-cdn.com/v4/letter/p/59ef9b/32.png) [@patrik\_arefjard](https://community.dynatrace.com/u/patrik_arefjard)\ **Post date:** [May 10, 2019, 12:05pm UTC](https://community.dynatrace.com/t/does-dynatrace-saas-support-sso-via-azuread/10952/31 "2019-05-10T12:05:16Z")
It’s a bit strange, the default federation metadata xml that is exported from our Azure AD tenant is not working. It’s missing settings about “NameIDFormat”. But I don’t think you can change entityid in AzureAD SAML. [An app page shows an error message after the user signs in - Microsoft Entra ID | Microsoft Learn](https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/application-sign-in-problem-application-error#change-entityid-user-identifier-format) If anyone has mange to setup SSO with Azure as Idp please provide a guide for it. ---
**Author:** ![Marcin\_Zejer](https://avatars.discourse-cdn.com/v4/letter/m/c2a13f/32.png) [@Marcin\_Zejer](https://community.dynatrace.com/u/Marcin_Zejer)\ **Post date:** [May 10, 2019, 1:59pm UTC](https://community.dynatrace.com/t/does-dynatrace-saas-support-sso-via-azuread/10952/32 "2019-05-10T13:59:02Z")
Hi Kevin and Patrik, looks there is problem with IDP configuration or metadata. Please share somehow metadata. You can do it by opening support ticket and sharing it here. Thanks, Marcin ---
**Author:** ![patrik\_arefjard](https://avatars.discourse-cdn.com/v4/letter/p/59ef9b/32.png) [@patrik\_arefjard](https://community.dynatrace.com/u/patrik_arefjard)\ **Post date:** [May 15, 2019, 8:45am UTC](https://community.dynatrace.com/t/does-dynatrace-saas-support-sso-via-azuread/10952/33 "2019-05-15T08:45:05Z")
Did manage to get this to work with Azure AD. So the solution to this is: - Sign SAML response and assertion ([Link to How-To](https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/certificate-signing-options#change-certificate-signing-options-and-signing-algorithm)) - Add this line to under IDPSSODescriptor metadata XML that you export from Azure: \urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress\ [Previous page](https://community.dynatrace.com/t/does-dynatrace-saas-support-sso-via-azuread/10952.md?page=1)