> ## Knowledge Base Index
> Fetch the complete knowledge base index at: https://support.toggl.com/sitemap.xml
> Use this file to discover available pages before exploring further.
> Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash).

# Setting up SSO for Entra ID (formerly Azure AD)

If you are setting up SSO for Entra ID (formerly Azure AD) these instructions will be useful for you!

1. Log in to Microsoft Entra ID (<https://entra.microsoft.com/>) using a Global Admin account.
2. Create a new "Enterprise Application", name it "Toggl".
3. On the "Overview" tab, select the option "2. Set up single sign on" and choose "SAML" on the next page.
4. Use the information from Toggl (on the right) to fill in the information in the new Enterprise Application:  

   **Note**: if you need your users to begin the SSO flow from your side (also known as Identity Provider initiated login) instead of doing so at [`https://accounts.toggl.com/track/sso-login/`](https://accounts.toggl.com/track/sso-login/) you should append `?toggl_product=track` at the end of the "Reply URL" field.

   ![](https://canada1.discourse-cdn.com/flex012/uploads/toggl1/original/1X/dc9f515eb1a4cdc4904cffb846a0545d528fc77e.jpeg)
5. Change "(2) Attributes & Claims" and switch the "Unique User Identifier" to "user.mail" instead of "user.userprincipalname".
6. Edit "(3) SAML Certificates" in the "Token signing certificate" section and set the "Signing Option" to one of the following options:

     

* "Sign SAML Response and Assertion"

* "Sign SAML Response"

   [![](https://21421994.fs1.hubspotusercontent-na1.net/hubfs/21421994/Knowledge%20Base%20Import/image_2024-10-30_16-46-32-1.png)](https://21421994.fs1.hubspotusercontent-na1.net/hubfs/21421994/Knowledge%20Base%20Import/image_2024-10-30_16-46-32-1.png)Please avoid selecting the “assertion-only” option to avoid issues.*
7. Add individual user accounts or groups to the "Users and groups" to allow them to use the IdP:

   ![](https://canada1.discourse-cdn.com/flex012/uploads/toggl1/original/1X/61e8b620205ef61ddead96233d94bc34e2803754.jpeg)