# Azure SSO

> Learn more here about [Azure SSO](https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/configure-single-sign-on-non-gallery-applications)

{% stepper %}
{% step %}

## Add Lenses from Azure SSO gallery

Go to **Enterprise applications->New Application.**

Search for Lenses.io in the gallery directory.

Choose a name for Lenses e.g. Lenses.io and click **Add.**
{% endstep %}

{% step %}

## Enable SSO

On the overview page select **Single Sign On**.
{% endstep %}

{% step %}

## Configure SAML

{% hint style="warning" %}
Remember to activate HTTPS on HQ. See [TLS](https://docs.lenses.io/latest/devx/6.0/deployment/hq#tlsconfig).
{% endhint %}

<table><thead><tr><th width="223">Setting</th><th>Value</th></tr></thead><tbody><tr><td>Identifier (Entity ID)</td><td>Use the <strong>base url</strong> of the Lenses installation e.g. <strong>https://lenses-dev.example.com</strong></td></tr><tr><td>Reply URL</td><td>Use the <strong>base url</strong> with the callback details e.g. <strong>https://lenses-dev.example.com/api/v2/auth/saml/callback?client_name=SAML2Client</strong></td></tr><tr><td>Sign on URL</td><td>Use the <strong>base url</strong></td></tr></tbody></table>
{% endstep %}

{% step %}

## Download SAML Certificates

Download the **Federation Metadata XML**.
{% endstep %}

{% step %}

## Configure SAML in HQ

SAML configuration is set in HQ's **config.yaml** file. See [here ](https://docs.lenses.io/latest/devx/6.0/deployment/hq#samlconfig)for more details.
{% endstep %}
{% endstepper %}