5. In a separate browser tab, log into Domo as an Admin user and navigate to **More** > **Admin** to view the Admin Settings.
6. Under **Authentication**, select **SAML (SSO)**.
7. On the **SAML (SSO)** page, select **Start Setup** > **Manual setup**.
8. Under **Information your IdP may need**, copy the URL in the **SAML Assertion Endpoint URL** field up to ".com" (the highlighted portion in the image below). This will be used for both the Entra **Sign On URL** and **Identifier (Entity ID)** fields.
9. Return to the Entra browser tab.
10. In the **Basic SAML Configuration** section, enter the values for the following fields:
1. In the **Sign on URL** text box, paste the URL you copied from Domo.
2. In the **Identifier (Entity ID)** text box, paste the same URL you copied from Domo.
11. Copy the URL from the **Login URL** field. (Note that this URL is the same as the one in the **Logout URL**.)
**Note:** You may ignore the **Microsoft Entra ID Identifier** URL as this is not used.
12. Return to Domo.
13. Under **Information from your IdP**, paste the URL from the previous step into the **Identity provider endpoint URL** field.
14. In the **Entity ID** field, paste the value from step 8 (the highlighted portion).
15. Return to Entra.
16. On the **Set up single sign-on with SAML** page, in the **SAML Signing Certificate** section, find **Certificate (Base64)** and select **Download** to download the certificate and save it to your computer.
17. Return to Domo.
18. Under **Information from your IdP**, select 
19. (Optional) Check the boxes under **Advanced settings** to configure them. A few are defined below:
* **Only invited people can access Domo —** This prevents Entra ID users from logging into Domo through SSO until they are invited to Domo. (By default, when SSO is enabled in Domo, any user in your Entra ID directory can log into Domo.)
* **Import guests from identity provider —** This copies your groups from Entra to Domo. **Note:** Entra doesn't currently support groups that represent company departments, so Domo doesn't recommend enabling this option.
24. Configure the user information that is sent to Domo.
Domo accepts the following attribute names, and Entra allows you to assign values. When defining attributes passed back to Domo, use the attribute names listed in the table below. The `email` attribute is required; all others are optional.
Attribute | Description |
|---|---|
name | The full name of the user |
name.personal | The user's first name |
name.family | The user's last name |
email\* | The email address of the user |
email.secondary | A secondary email address for the user |
title | The job title of the user |
user.phone | The primary phone number of the user, usually a mobile phone number |
desk.phone | The number for the user's desk phone |
group | The group that the user belongs to, usually a department name |
role | The user's role in the company |
employee. id | The user's employee ID |
hire.date | The user's hire date |
title | The user's job title |
department | The user's department in the company |
location | The company location for the user |
locale | The user's locale, which determines settings such as number formats, measurements, etc. |
timezone | The user's time zone |
If you make a mistake, Entra allows you to "reset to default" and start over.
After you delete the unnecessary rows, your list should look like the list below. It contains only one row with a name ending in `claims/nameidentifier.`
26. Add two new rows for `name` and `email` with values that Domo expects.
1. To add a row for `name,` do the following:
1. Select **add user attribute**.
The **Add User Attribute** modal displays.
2. Enter `name` in the **ATTRIBUTE NAME** field.
3. Select **user.displayname** in the **ATTRIBUTE VALUE** dropdown.
4. Select the checkmark at the bottom right of the modal.
4. Select the checkmark at the bottom right of the modal.
Your final attributes should look like the screenshot below:
3. (Optional) If you want to add a title, phone, and/or group, do so now using the same workflow that you did for `name` and `email.`
27. Select **Apply Changes**.
This concludes the SSO setup within Entra.
28. In Domo, select **Save Config**.
### Test Connection to Domo
Test your connection in Domo by clicking the **Test Config** button at the top of the **Single Sign-On (SSO)** page.
**Note:** Entra may take up to five minutes to apply your settings, so the connection test may not immediately work.
If you followed all the implementation steps correctly, you should see a success message. If not, review the above steps or contact [Domo Support](https://domo-support.domo.com/s/)