Skip to content

Set up IDP of SAML for Microsoft Entra ID

To set up an identity provider of type SAML, follow these steps:

  1. Navigate to "Enterprise applications" in Microsoft Entra ID and configure "Single sign-on" in the "Manage" section.

  2. Sign in to Microsoft Entra ID and navigate to "Enterprise applications".

  3. Select the required application to configure the SAML identity provider.
  4. Navigate to the "Manage" section in the left navigation panel.

  5. Select "Single sign-on" from the "Manage" menu to access the SAML-based configuration page.

    Single sign-on

  6. Setting Up "Basic SAML Configuration in Microsoft Entra ID":

    • Configure the Basic SAML Settings:
      • Use the link below to download the metadata from the Insights Hub tenant.
        https://<<Tenant ID>>.ciam.eu1.sws.siemens.com/saml/metadata
      • Once you download the metadata, upload this matadata into Microsoft Entra Application. Upload metadata file
      • Once uploading the metadata, the "Identifier (Entity ID)" and "Reply URL" are automatically populated. Save the configuration once these values are loaded. Basic SAML Configuration

  7. To add a user in the Microsoft Entra application, select the "Users and groups" tab and click "Add user/group".

    User/Groups

    Note

    Ensure the same user is registered in the Insights Hub tenant.

  8. Download the Federation Metadata XML file from the Microsoft Entra application for use during the Insights Hub configuration.

    SAML-based download

  9. Create a SAML protocol-based IDP in Siemens Insights Hub and upload the SAML Metadata XML file.

    • Login to Insights Hub (IH) tenant.
    • Navigate to the Settings App in the System Tools tab.

    • Click "Identity Provider Federation".

      IPF

  10. Click "Configure Custom Identity Provider".

    Configure custom Identity provider

  11. Select "SAML" and click "Next".

    Type selection

  12. Enter all required fields:

    • Attribute for Email: emailaddress
    • Attribute for First Name: givenname
    • Attribute for Last Name: surname
    • Attribute for Username: emailaddress
    • Origin Key: It can be any valid string e.g.: firstapp
    • Meta Location: Open the Microsoft entra application XML metadata file in Notepad and copy and paste into the meta location.
    • Logout URL: Get it from the SAML metadata of the Microsoft entra application
      Open the XML metadata file in Notepad.
      Search for the "SingleLogoutService" tag.
      Use the URL in the Location field as the Logout URL. Configuration
    • Once all the required fields are added, save it.

  13. After establishing the IDP, register the Callback and Reply URLs in Microsoft Entra ID prior to activation.

  14. In the Microsoft Entra ID application, select "Single sign-on" from the navigation menu, open "Basic SAML Configuration", and register the following Reply URLs.
    Origin Key- Same as added in application in Insights Hub
    https://<<Tenant ID>>.ciam.eu1.sws.siemens.com/login/callback/<<Origin Key>>.

    SAML Configuration

  15. You can now activate once these "Reply URLs" have been added. Activate Identity Provider in Insights Hub tenant.

    Active now

  16. Login and acknowledge the IDP activation. Once completed, IDP is activated successfully.

    Acknowledge New Provider

Last update: September 30, 2026

Except where otherwise noted, content on this site is licensed under the Development License Agreement.