Check the official documentation to register a SAML app in your Azure tenant https://learn.microsoft.com/en-us/entra/external-id/customers/how-to-register-saml-app

Need a bit of context?

https://supabase.com/blog/what-is-saml-authentication

1. Sign in to the Microsoft Entra admin center as at least an Application Administrator.

2. If you have access to multiple tenants, use the Settings icon  in the top menu and switch to your external tenant from the Directories menu.

   

3. Search for “Enterprise applications” in the top search bar

4. Select New application, and then select Create your own application.

   

5. On the Create your own application pane, enter a name for your app.

6. Select Integrate any other application you don't find in the gallery (Non-gallery).

7. Select Create.

8. The app Overview page opens. In the left menu under Manage, select Properties. Switch the Assignment required? toggle to No so that users can use self-service sign-up, and then select Save.

   

9. In the left menu under Manage, select Single sign-on.

10. Under Select a single sign-on method, select SAML.

    

11. On the SAML-based Sign-on page, do one of the following:

• Use the Edit pencil option to update each section, and then select Save. This is where you will enter Stack’s Entity ID (also called Metadata URL) and Reply URL (also called ACS URL)
• You can find those values below or on the StackAI SSO page.

1. At the third section under SAML Certificates, copy the Federation Metadata XML.

   

2. Go back to stack-ai.com and go to your settings. Select SSO Settings and paste your App Federation Metadata URL there, make sure to include your domain and set your default role. Once you click “Enable SSO”, any user with that domain will be able to automatically log in to Stack through SSO. If it is their first time logging in via SSO, a new account will be created for them.

   

   

   • Selecting Log-in with SSO will prompt the user to enter their email address. They will then be redirected to log-in through Microsoft. If their log in is successful, they will be brought back to StackAI.