> ## Knowledge Base Index
> Fetch the complete knowledge base index at: https://central.baseb.app/sitemap.xml
> Use this file to discover available pages before exploring further.
> Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash).

# Azure Integration

In this document, we show how to configure user provisioning and Single Sign-On between a Microsoft Entra ID tenant and a Base-B account.

The document assumes that you are already using Microsoft Office 365 ID or Microsoft Entra ID in your organization and want to use Microsoft Entra ID to allow users to authenticate with Base-B. Microsoft Entra ID itself can be connected to an on-premises Active Directory and use Entra ID federation, pass-through authentication, or password hash synchronization.

# Contents

* Requirements
* Configuration Steps
* Known Issues/Troubleshooting

# Requirements

User provisioning based on the SCIM protocol and Single Sign-On via SAML are only available for paying customers on Base-B.

Refer to the [Microsoft Entra ID pricing](https://www.microsoft.com/pt-br/security/business/microsoft-entra-pricing) page to see the applicable fees for using Microsoft Entra ID.

# Configuration Steps

Configure the provisioning functionality and single sign-on as follows.

### Enable Single Sign-On functionality

###### In Microsoft Azure

In Microsoft Azure, under Enterprise Applications, you will need to follow these steps:

1. Click the “New Application” button

![](https://storage.crisp.chat/users/helpdesk/website/9040e83e46dad000/screenshot-2024-05-17-125052_wiwp28.png)

2. Search for Base-B and select the Base-B application

![](https://storage.crisp.chat/users/helpdesk/website/9040e83e46dad000/screenshot-2024-05-17-125238_1qdy07w.png)

3. Once the application is added, go to the Single Sign-On page

4. In step 1 (Basic SAML Configuration), fill in the fields:
* Fill in the "Identifier" field with a name for the application
* In the "Reply URL" field, enter the Base-B URL **https://api.baseb.app/v1/sso/saml?companyGroupId=id**. Don't forget to replace "id" with your company’s ID.

![](https://storage.crisp.chat/users/helpdesk/website/9040e83e46dad000/screenshot-2024-05-17-125433_13barb5.png)

5. In step 3 (SAML Certificates), click edit and then select the option “Sign SAML response and assertion” and click save

![](https://storage.crisp.chat/users/helpdesk/website/9040e83e46dad000/screenshot-2024-05-17-125634_16rp8rv.png)

6. Download and copy the content of the certificate available in step 3 (SAML Certificates)

###### In Base-B

1. In Settings > Integrations > Applications, select the Microsoft Azure integration

![](https://storage.crisp.chat/users/helpdesk/website/9040e83e46dad000/screenshot-2024-05-17-125853_yegaj.png)

2. A screen will be presented which should be filled out as instructed below:
* In the certificate field, enter the certificate downloaded from "SAML Certificates" in Microsoft Azure
* In the Audience field, enter the Identifier provided in the "Basic SAML Configuration" of Microsoft Azure

![](https://storage.crisp.chat/users/helpdesk/website/9040e83e46dad000/screenshot-2024-05-17-130052_3l9k04.png)

3. After clicking "Save," an API Key will be provided. Click copy to use it for user provisioning

![](https://storage.crisp.chat/users/helpdesk/website/9040e83e46dad000/screenshot-2024-05-17-130150_1szpivx.png)

### Enable User Provisioning functionality

###### In Microsoft Azure

1. Go to the Provisioning page

2. Click "Edit Provisioning"

![](https://storage.crisp.chat/users/helpdesk/website/9040e83e46dad000/screenshot-2024-05-17-130320_wcniy5.png)

3. Go to the "Admin Credentials" tab and fill in the fields:
* In the "Tenant URL" field, enter the Base-B URL "https://api.baseb.app/scim/v2/"
* In the "Secret Token" field, enter the API Key.

4. Click "Save"

![](https://storage.crisp.chat/users/helpdesk/website/9040e83e46dad000/image_1ad0s8d.png)
# Known Issues/Troubleshooting

If you have questions or difficulties with the Base-B/Microsoft Azure integration, contact Base-B support via **suporte@baseb.com.br**