> ## Documentation Index
> Fetch the complete documentation index at: https://ngrok.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Microsoft Entra ID SSO (SAML)

> Use Microsoft Entra ID SAML to secure access to the ngrok Dashboard with single sign-on (SSO).

This guide walks you through configuring Microsoft Entra ID as the primary Identity Provider for the ngrok Dashboard.
By integrating Microsoft Entra ID with ngrok, you can:

* Restrict access to the ngrok Dashboard to only users authenticated via Microsoft Entra ID
* Use Microsoft Entra ID's dashboard to facilitate access to the ngrok app

## What you'll need

* An ngrok account with administrative rights to modify account settings.
* An ngrok Pay-as-you-go account with access to configure SAML SSO.

## 1. Configure Microsoft Entra ID

In the Microsoft Entra admin center, add an enterprise application for the ngrok Dashboard, then enable SAML single sign-on for it.
See Microsoft's guides to [adding an enterprise application](https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/add-application-portal) and [enabling SAML single sign-on](https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/add-application-portal-setup-sso).

As you configure the app:

* Enter temporary values such as `https://temporary` for the **Identifier (Entity ID)** and the **Reply URL (Assertion Consumer Service URL)**.
  You replace them with ngrok's values in a later step.
* Set the **Unique User Identifier** to `user.mail`.
  This value can vary based on your setup, but it must be an email address.

Then download the app's **Federation Metadata XML** from the **SAML Certificates** section of its **Single sign-on** settings.
You upload this file to ngrok in the next step.

Microsoft Entra ID restricts access to the app through assignments, and new apps start with none.
Assign the users and groups who should reach the ngrok Dashboard, and make sure your own account is assigned so you can test the integration.

## 2. Configure ngrok

To configure ngrok Dashboard SSO with Microsoft Entra ID:

* Go to the [ngrok Dashboard](https://dashboard.ngrok.com).
* Click **Settings > Account**.
* In the **Single Sign-On (SSO)** section, click **New Identity Provider > New SAML Provider**.
* In the **SAML Provider** settings, provide a **Description** and click **Upload XML**.
* Select the metadata file you downloaded and click **Save**.
* After you save, the **SP Metadata** appears.
  Copy these values into the Microsoft Entra ID app's **Single sign-on** settings, replacing the temporary values you entered earlier.
* Save the changes in Microsoft Entra ID.

## 3. Test the integration

* Navigate to the Microsoft Entra ID app's **Single sign-on** settings.
* Click **Test > Test sign in**.
* Microsoft Entra ID redirects you to the ngrok Dashboard.
  * If the current user isn't a member of the ngrok account and just-in-time (JIT) provisioning is enabled, ngrok prompts the user to join.
  * If the current user is already a member, ngrok signs them in to the ngrok Dashboard.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.