# SAML SSO is killing me **URL:** \ **Category:** Ignition\ **Created:** [February 18, 2026, 5:31am UTC](https://forum.inductiveautomation.com/t/saml-sso-is-killing-me/114024 "2026-02-18T05:31:47Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![pdefinis](https://avatars.discourse-cdn.com/v4/letter/p/3ab097/32.png) [@pdefinis](https://forum.inductiveautomation.com/u/pdefinis)\ **Post date:** [February 18, 2026, 5:31am UTC](https://forum.inductiveautomation.com/t/saml-sso-is-killing-me/114024/1 "2026-02-18T05:31:47Z")
I have been spending weeks racking my brain on this I cannot figure out Azure SSO with SAML for the life of me. This is also the only vendor I’ve seen that doesn’t have their own instruction s for building their app. this I rebuilt an entirely new app using Microsoft SAML instructions. [Register a SAML app - Microsoft Entra External ID | Microsoft Learn](https://learn.microsoft.com/en-us/entra/external-id/customers/how-to-register-saml-app) Imported using your instructions ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/a/a/aad9ee924d490a502c1dc5194d962b4bed11628a.gif) I have roles, I have users assigned to eh roles. I have a groups claim. WTF is going on ?!?!?!?! Where do we look for errors? ---
**Author:** ![diamond](https://avatars.discourse-cdn.com/v4/letter/d/e79b87/32.png) [@diamond](https://forum.inductiveautomation.com/u/diamond)\ **Post date:** [February 18, 2026, 9:27am UTC](https://forum.inductiveautomation.com/t/saml-sso-is-killing-me/114024/2 "2026-02-18T09:27:54Z")
I’ve implemented several SAML applications, and Ignition is by far the easiest. Looking at your screenshot, I would suggest disabling certificate signature verification. ---
**Author:** ![pdefinis](https://avatars.discourse-cdn.com/v4/letter/p/3ab097/32.png) [@pdefinis](https://forum.inductiveautomation.com/u/pdefinis)\ **Post date:** [February 18, 2026, 1:26pm UTC](https://forum.inductiveautomation.com/t/saml-sso-is-killing-me/114024/3 "2026-02-18T13:26:11Z")
Thank you. Thank got response. Now I just can’t seem to get the roles going. What kind of group claim do I need? ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/7/1/71c47beb88bd4915613399fab45558e32918a3ed.png) ---
**Author:** ![Chris\_Bingham](https://avatars.discourse-cdn.com/v4/letter/c/e5b9ba/32.png) [@Chris\_Bingham](https://forum.inductiveautomation.com/u/Chris_Bingham)\ **Post date:** [February 18, 2026, 1:37pm UTC](https://forum.inductiveautomation.com/t/saml-sso-is-killing-me/114024/4 "2026-02-18T13:37:43Z")
Start by looking one tab to the left, do you see any IDP response data that matches your desired roles? ---
**Author:** ![diamond](https://avatars.discourse-cdn.com/v4/letter/d/e79b87/32.png) [@diamond](https://forum.inductiveautomation.com/u/diamond)\ **Post date:** [February 18, 2026, 2:43pm UTC](https://forum.inductiveautomation.com/t/saml-sso-is-killing-me/114024/5 "2026-02-18T14:43:44Z")
You have to: 1. create security levels 2. define security level rules that match your needs Everything is in the docs ---
**Author:** ![pdefinis](https://avatars.discourse-cdn.com/v4/letter/p/3ab097/32.png) [@pdefinis](https://forum.inductiveautomation.com/u/pdefinis)\ **Post date:** [February 18, 2026, 4:26pm UTC](https://forum.inductiveautomation.com/t/saml-sso-is-killing-me/114024/6 "2026-02-18T16:26:13Z")
I think my issue is the user mappings. I’m a network engineer who knows Azure that is helping out our automation engineer, so I’m a little lost on what to do here. My software skill are not the best. I’m using this statement for all fo teh direct mappings whic I’m sure is not correct /saml2p:Response/saml2:Assertion/saml2:Subject/saml2:NameID/text() What do I need to use for Firstname Lastname email roles for a path or where can I find that? ---
**Author:** ![Matrix\_Engineering](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/matrix_engineering/32/19781_2.png) [@Matrix\_Engineering](https://forum.inductiveautomation.com/u/Matrix_Engineering)\ **Post date:** [February 18, 2026, 4:37pm UTC](https://forum.inductiveautomation.com/t/saml-sso-is-killing-me/114024/7 "2026-02-18T16:37:09Z")
> [@diamond](#): > > Everything is in the docs > **[Configuring Identity Providers | Ignition User Manual](https://docs.inductiveautomation.com/docs/8.3/platform/security/identity-provider-authentication-strategy/configuring-identity-providers)** > > Registering the Ignition Gateway ---
**Author:** ![pdefinis](https://avatars.discourse-cdn.com/v4/letter/p/3ab097/32.png) [@pdefinis](https://forum.inductiveautomation.com/u/pdefinis)\ **Post date:** [February 18, 2026, 4:48pm UTC](https://forum.inductiveautomation.com/t/saml-sso-is-killing-me/114024/8 "2026-02-18T16:48:03Z")
so that’s the issue. I dont understand the docs. I’m am not a software person. I think in Binary, hexidecimal, and network engineering. this is literal gibberish to me. that is why i need help ---
**Author:** ![michael.flagler](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/michael.flagler/32/26272_2.png) [@michael.flagler](https://forum.inductiveautomation.com/u/michael.flagler)\ **Post date:** [February 18, 2026, 4:51pm UTC](https://forum.inductiveautomation.com/t/saml-sso-is-killing-me/114024/9 "2026-02-18T16:51:05Z")
You might also try going through the videos that walk you through it. > **[Creating an Identity Provider Video at Inductive University](https://inductiveuniversity.com/videos/creating-an-identity-provider/8.1)** > > Learn how to configure an Identity Provider in Ignition 8. Here's the attribute mapping portion of the manual for v8.1 also: > **[User Attribute Mapping | Ignition User Manual](https://docs.inductiveautomation.com/docs/8.1/platform/security/identity-provider-authentication-strategy/configuring-identity-providers/user-attribute-mapping)** > > The User Attribute Mapping page allows you to map information in the Identity Providers (IdP) response document to easily understandable properties. These properties are then made available as Session Properties in the Perspective Session. To work,...