Enterprise Edition

Configuring SAML SSO with Entra ID (formerly Azure AD)

• Last updated: April 8, 2025

• Read time: 2 Minutes

This section explains how to configure SAML SSO using Entra ID (formerly Azure AD) as your identity provider. You may also need to refer to the Entra ID documentation.

Before you start

Make sure your web server URL includes protocol and port information. For more information, see Configuring your web server.

Step 1: Add Burp Suite Enterprise Edition to your trusted applications

To add Burp Suite Enterprise Edition to your trusted applications:

1. Log in to Burp Suite Enterprise Edition as an administrator.
2. From the settings menu , select Integrations.
3. On the SAML tile, click Configure. Notice that you can copy both the Relying party trust identifier and the Relying party service URL.
4. In Entra ID, go to Basic SAML Configuration.
5. Paste the Relying party service URL into the Reply URL (Assertion Consumer Service URL) field.
6. Paste the Relying party trust identifier into the Identifier (Entity ID) field.

Step 2: Import key details from Entra ID

To configure Burp Suite Enterprise Edition, you need to import some key details from Entra ID (formerly Azure AD):

1. In Entra ID, go to the SAML Signing Certificate page.
2. Download the Federation Metadata XML file.
3. In Burp Suite Enterprise Edition, make sure that you're still on the SAML page.
4. In Company details, enter your company name.
5. In SAML configuration, click Import metadata.
6. Click Choose file and select the Federation metadata XML file.
7. Click Save.

Step 3: Test your configuration

Once the connection is successfully established, we recommend that you test your configuration by logging in to Burp Suite Enterprise Edition. If the configuration was successful, you will see a message that you have logged in, but you don't yet have permission to do anything.

Managing groups

You can now configure how you manage your groups:

• You can push the groups from your identity provider using SCIM. For more information, see Configuring SCIM.
• Alternatively, you can duplicate your Entra ID groups in Burp Suite Enterprise Edition, and manage them locally. For more information, see Enabling Burp Suite Enterprise Edition to access your Entra ID groups