---
title: "Set up SAML SSO Authentication"
url: "https://help.outdoo.ai/en/article/set-up-saml-sso-authentication"
language: "en"
last_updated: "2026-11-10T16:39:53.517Z"
---

# Set up SAML SSO Authentication

Learn how to set up SAML SSO authentication in Outdoo AI with any identity provider, including step-by-step instructions for Microsoft Entra ID.

Outdoo AI supports any SAML SSO provider for your team's login. This guide covers what you need to set up SAML SSO in Outdoo AI for non-specific providers, and includes details you may need to share with your provider. Contact your account manager for any further questions.

![Authentication settings page with the SAML provider fields: metadata URL, entity ID, ACS URL, and X509 certificate note](https://cdn.prod.website-files.com/666fdec617b81d256ca8f1ca/6a7d9341104b6a8494dd7ece_company-settings-authentication.avif)

*The Additional Authentication Providers section, where SAML metadata and entity details are entered.*

## Prerequisites

You will need to provide the following:

-   **Identity Provider Metadata URL** or **Identity Provider Metadata File (XML)**

-   -   The URL must be publicly accessible and return a valid SAML metadata response.

-   -   The XML response or metadata file must include two SSO bindings with valid URLs: HTTP-POST and HTTP-REDIRECT.

-   **After Sign Out, Redirect To:** the URL where team members are redirected after signing out of Outdoo AI.

-   **SAML name identifier:** in your provider, set the SAML name identifier property to **emailAddress**.

-   **Signed authentication request:** make sure Signed Authentication Request is turned **off** in your provider.

## Information your provider may request

Your provider may ask for some of the following. You will find these under **Note** on the [Authentication](https://app.outdoo.ai/settings/company/authentication) page once you select SAML.

-   **Outdoo AI Entity ID:** `https://app.outdoo.ai`. Use this exactly as written, not your custom domain.

-   **Outdoo AI Reply URL (ACS URL):** `https://api.outdoo.ai/auth/sso/saml/login/[base64_id_from_sso_page]`. Copy the exact URL, including your ID, from the Authentication page.

-   **X.509 Certificate:** Outdoo AI does not provide this certificate. Your provider should generate one if required.

## Microsoft Entra ID SAML SSO Setup

-   Log in to **Microsoft Entra ID** with admin credentials and select **Enterprise applications**.

-   Click **+New application > Create your own application**.

-   Name the application (for example, *Outdoo AI SSO*), keep the defaults, and click **Create**.

-   Inside the app, select **Set up single sign-on**.

-   Choose **SAML** as the method.

-   In **Basic SAML Configurations**, enter:

-   -   Identifier (Entity ID): `https://app.outdoo.ai`

-   -   Reply URL (ACS): `https://api.outdoo.ai/auth/sso/saml/login/[base64_id_from_sso_page]`

-   Click **Save**.

-   In **Attributes and Claims**:

-   -   Set **Name identifier format** to **Email address**.

-   -   Source: Attribute

-   -   Source attribute: `user.mail`

-   -   Delete any additional claims.

-   (Optional) If you plan to provision users via Microsoft Entra ID, make sure permissions are configured according to the Microsoft Entra ID provisioning setup.

-   In **Users and Groups**, assign users or groups who should log in via SSO.

-   In **Single Sign-On**, copy the **App Federation Metadata URL**.

## Final Step in Outdoo AI

-   In Outdoo AI, go to **Company Settings > Authentication**.

-   In the **Additional Authentication Providers** section, select **SAML** from the provider dropdown.

-   Under **Metadata Source**, choose **Identity Provider Metadata URL** and paste the App Federation Metadata URL from Microsoft Entra ID. (If your provider gives you a file instead, choose **Identity Provider Metadata File (XML)** and upload it.)

-   In **After Sign Out, Redirect To**, enter the URL where team members should land after signing out.

-   Click **Save Changes**.

-   Sign out and test login via Entra ID to confirm the SSO authentication works.

This article covers SAML only. To turn Email and Password, Google, or Microsoft login on or off, or to change how long team members stay signed in, see the [Authentication Setup Guide](https://help.outdoo.ai/en/article/authentication-setup-guide). For an overview of all login methods, see [Authentication Methods in Outdoo AI](https://help.outdoo.ai/en/article/authentication-methods-in-outdoo).

Hope this article was helpful. For any queries, please write to support@outdoo.ai

## Related articles

-   [Authentication Methods in Outdoo AI](https://help.outdoo.ai/en/article/authentication-methods-in-outdoo): overview of each login method and who it suits

-   [Authentication Setup Guide](https://help.outdoo.ai/en/article/authentication-setup-guide): step-by-step instructions for enabling login methods and session settings

-   [Add or Manage Team Members](https://help.outdoo.ai/en/article/add-or-manage-team-members)