How do I set up Single Sign-On (SSO) with Microsoft Azure?

SDS Manager supports SAML-based SSO through Microsoft Azure's Enterprise Applications. Broad strokes:

1. In the Azure Dashboard, go to Enterprise applications and create a new non-gallery application
2. Select SAML as the authentication protocol
3. Under Basic SAML Configuration, set both the Identifier (Entity ID) and the Reply URL to https://inventory.stage.sdsmanager.com/saml2_auth/acs/
4. In SDS Manager, go to Settings → Single Sign-On and enter that app's Federation Metadata URL and Application ID yourself, then click Save
5. Define custom roles in App registrations — typically Admin, Staff, Read Only, and Admin Light. The role's Value field must match SDS Manager's role names exactly (case-insensitive) — this is what gets sent in the SAML assertion
6. Assign users to the roles under Enterprise Applications; they can then sign in via myapps.microsoft.com

This is an Azure-admin-side configuration, so the detailed screens live in your own Azure tenant rather than in SDS Manager. Once you have the Federation Metadata URL and Application ID, the SDS Manager side is self-service: Settings → Single Sign-On is your own form with its own Save and Test buttons — you enter the values and finish the setup yourself, without contacting us. See how do I set up Single Sign-On (SSO) for my team? for more on the Test-button step.