---
title: Set Up Single Sign-On (SSO) with Microsoft Entra ID
description: Set up Single Sign-On (SSO) with Microsoft Entra ID to allow users to securely log in to Simvia using their Microsoft work credentials.
---
[Skip to content](https://helpcenter.simvia.com/knowledge-base/set-up-single-sign-on-sso-with-microsoft-entra-id#main-content)
English
Show submenu for translations
[](https://helpcenter.simvia.com/knowledge-base?hsLang=en)
Open main navigation
Close main navigation
- English
Show submenu for translations
This is a search field with an auto-suggest feature attached.
- There are no suggestions because the search field is empty.
1. [Help Center](https://helpcenter.simvia.com/knowledge-base?hsLang=en)
2. [Getting Started](https://helpcenter.simvia.com/knowledge-base/getting-started?hsLang=en)
3. [Account & Access](https://helpcenter.simvia.com/knowledge-base/getting-started?hsLang=en#account-access)
# Set Up Single Sign-On (SSO) with Microsoft Entra ID
This article explains how to connect Microsoft Entra ID to Simvia so your colleagues can log in with their Microsoft work credentials. Access to Simvia is then managed centrally in Microsoft, which makes onboarding and offboarding colleagues simpler and more secure.
**Note:** At the moment, Simvia supports SSO through Microsoft Entra ID only.
**In this article**
- Before you start
- Step 1: Start the SSO setup in Simvia
- Step 2: Create an enterprise application in Microsoft Entra
- Step 3: Configure SAML SSO
- Step 4: Configure attributes and claims
- Step 5: Assign users
- Step 6: Copy the App Federation Metadata URL
- Step 7: Complete the setup in Simvia
- Verify your domain (recommended)
- Troubleshooting
### Before you start
To set up SSO, you need:
- A Pro Simvia account
- SSO enabled for your account by the Simvia team (contact Support if it’s not enabled yet)
- Owner permissions in your Simvia account
- An active Microsoft Entra ID tenant
- Admin access to that Entra tenant
**Tip:** Open Simvia and the Microsoft Entra portal in two browser tabs. You’ll switch between them during the setup.
### Step 1: Start the SSO setup in Simvia
1. Log in to your Simvia account.
2. Go to **Account settings** → **Account security**.
3. Click **Connect Microsoft Entra** in the SAML SSO section.
The Microsoft Entra configuration window opens and shows your **Entity ID** and **Reply URL**. Use the **Copy** buttons to copy them, because you’ll need both in Step 3. Keep this window open.
### Step 2: Create an enterprise application in Microsoft Entra
1. Go to the Microsoft Entra portal.
2. Navigate to **Applications** → **Enterprise applications**.
3. Click **+ New application**.
4. Click **Create your own application**.
5. Name the application, for example “Simvia - SSO”.
6. Select **Integrate any other application you don’t find in the gallery (Non-gallery)**.
7. Click **Create**.
### Step 3: Configure SAML SSO
1. In your new application, go to **Single sign-on**.
2. Select **SAML**.
3. Under **Basic SAML Configuration**, click **Edit**.
4. Paste the **Entity ID** and **Reply URL** you copied from Simvia.
5. Click **Save**.
### Step 4: Configure attributes and claims
This step is required. It makes sure Microsoft Entra sends each user’s email address, name and language to Simvia. Without these claims, users may not be created correctly in Simvia.
1. Under **Attributes & Claims**, click **Edit**.
2. Make sure these claims exist with these exact short names and no namespace. Rename the default claims where needed:
- **emailaddress**, source attribute: user.mail
- **name**, source attribute: user.displayname
- **locale**, source attribute: user.preferredlanguage
3. Remove any default claims that conflict with or duplicate the ones above.
4. Open the **emailaddress** claim, expand **Advanced SAML claims options** and select **Expose claim in JWT tokens in addition to SAML tokens**.
5. Do the same for the **name** claim.
6. Click **Save** each time you change a claim.
When everything is set up correctly, the Type column shows **SAML, JWT** for emailaddress and name, and **SAML** for locale.
Then check the **Unique User Identifier (Name ID)** claim. It should be set up like this:
- **Name identifier format:** Email address
- **Source attribute:** user.mail
### Step 5: Assign users
Only users and groups you assign to the application can log in to Simvia with SSO.
1. In your Entra application, go to **Users and groups**.
2. Click **+ Add user/group**.
3. Select the users or groups who need access to Simvia.
4. Click **Assign**.
### Step 6: Copy the App Federation Metadata URL
1. In your Entra application, go to **Single sign-on**.
2. Scroll to the **SAML Certificates** section.
3. Copy the **App Federation Metadata Url**.
### Step 7: Complete the setup in Simvia
1. Go back to the Microsoft Entra configuration window in Simvia.
2. Click **Next**.
3. Paste the App Federation Metadata URL into the **Metadata URL** field.
4. Click **Enable**.
Simvia checks the metadata and sets up the SSO connection automatically. When it’s done, the SAML SSO section shows **Microsoft Entra connected**.
To find your sign-up URL, click the gear icon next to **Microsoft Entra connected**. Your **Sign-up URL** is on the **Microsoft Entra** tab. Share it with your colleagues so they can log in to Simvia with Microsoft.
### Verify your domain (recommended)
When you’ve finished the SSO setup, we recommend verifying your company email domain. With a verified domain:
- Users from your company are automatically sent to your Microsoft SSO login
- Users don’t need to remember or choose a login method
- No other organisation can claim your domain
#### Add your domain
1. Go to **Account settings** → **Account security**.
2. Click the gear icon next to **Microsoft Entra connected**.
3. Open the **Domain verification** tab.
4. Enter your company domain, for example company.com.
5. Click **Add domain**.
Simvia creates a unique DNS TXT token for your domain. Click the copy icon next to it.
#### Add the DNS TXT record
1. Log in to your domain registrar or DNS provider, for example GoDaddy, Namecheap or Cloudflare.
2. Open the DNS management page.
3. Add a new record with these details:
- **Type:** TXT
- **Name / Host:** @
- **Value:** simvia-verification=\[your DNS token\]
4. Save the changes.
DNS changes can take up to 30 minutes to go through, but they’re often faster.
#### Verify the domain
1. Go back to the **Domain verification** tab in Simvia.
2. Click **Verify** next to your domain.
Once the domain is verified, it’s linked to your organisation.
### Troubleshooting
**You don’t see the Connect Microsoft Entra button**
- Check that SSO is enabled for your account. If it isn’t, contact Support.
- Check that you have Owner permissions in Simvia.
**The SSO setup fails when you click Enable**
- Check that you copied the full App Federation Metadata URL from the SAML Certificates section.
- Check that the Entity ID and Reply URL in Entra exactly match the ones in Simvia.
**A user can’t log in with SSO**
- Check that the user or their group is assigned in **Users and groups** in the Entra application.
**Users are missing a name or email address in Simvia**
- Check the claim names, source attributes and JWT settings in Step 4.
**Domain verification fails**
- Wait up to 30 minutes and click **Verify** again.
- Check that the TXT record value matches the token in Simvia.
**Need more help?** Contact our Support team at [support@simvia.com](mailto:support@simvia.com), we’re happy to help.
- [Getting Started](https://helpcenter.simvia.com/knowledge-base/getting-started?hsLang=en#main-content)
- [About Simvia](https://helpcenter.simvia.com/knowledge-base/getting-started?hsLang=en#about-simvia)
- [Navigating the Platform](https://helpcenter.simvia.com/knowledge-base/getting-started?hsLang=en#navigating-the-platform)
- [Account & Access](https://helpcenter.simvia.com/knowledge-base/getting-started?hsLang=en#account-access)
- [Supply Chain Approval (SCA)](https://helpcenter.simvia.com/knowledge-base/supply-chain-approval-sca?hsLang=en#main-content)
- [Dashboard](https://helpcenter.simvia.com/knowledge-base/supply-chain-approval-sca?hsLang=en#dashboard)
- [Compliance Overview](https://helpcenter.simvia.com/knowledge-base/supply-chain-approval-sca?hsLang=en#compliance-overview)
- [Organisations](https://helpcenter.simvia.com/knowledge-base/supply-chain-approval-sca?hsLang=en#organisations)
- [Products](https://helpcenter.simvia.com/knowledge-base/supply-chain-approval-sca?hsLang=en#products)
- [Requests](https://helpcenter.simvia.com/knowledge-base/supply-chain-approval-sca?hsLang=en#requests)
- [Documents](https://helpcenter.simvia.com/knowledge-base/supply-chain-approval-sca?hsLang=en#documents)
- [Requirements](https://helpcenter.simvia.com/knowledge-base/supply-chain-approval-sca?hsLang=en#requirements)
- [PPWR](https://helpcenter.simvia.com/knowledge-base/ppwr?hsLang=en)
- [Sustainability Risk Assessment (SRA)](https://helpcenter.simvia.com/knowledge-base/sustainability-risk-assessment-sra?hsLang=en)
- [Connections](https://helpcenter.simvia.com/knowledge-base/connections?hsLang=en#main-content)
- [Certification Databases](https://helpcenter.simvia.com/knowledge-base/connections?hsLang=en#certification-databases)
- [Laboratory Integrations](https://helpcenter.simvia.com/knowledge-base/connections?hsLang=en#laboratory-integrations)
- [Updates](https://helpcenter.simvia.com/knowledge-base/updates?hsLang=en#main-content)
- [Release Notes 2026](https://helpcenter.simvia.com/knowledge-base/updates?hsLang=en#release-notes-2026)
- [Release Notes 2025](https://helpcenter.simvia.com/knowledge-base/updates?hsLang=en#release-notes-2025)
[](https://www.simvia.com/)
Copyright © 2026, Simvia