{"id":3558,"date":"2024-04-26T10:47:21","date_gmt":"2024-04-26T17:47:21","guid":{"rendered":"https:\/\/www.couchbase.com\/blog\/saml-integration-microsoft-entra\/"},"modified":"2024-04-26T10:47:21","modified_gmt":"2024-04-26T17:47:21","slug":"saml-integration-microsoft-entra","status":"publish","type":"post","link":"https:\/\/www.couchbase.com\/blog\/saml-integration-microsoft-entra\/","title":{"rendered":"SAML Integration Simplified: Connecting Microsoft Entra with Couchbase Server for Secure SSO"},"content":{"rendered":"\n<p>In today&#8217;s digital landscape, businesses are continuously seeking efficient ways to manage their access control and authentication processes. Integrating Microsoft Entra (formerly known as Azure AD) with Couchbase Server offers a robust and secure solution for single sign-on (SSO) using SAML. This integration enhances security and streamlines user management by leveraging Entra\u2019s comprehensive identity and access management features while utilizing Couchbase Server&#8217;s powerful data platform capabilities. By connecting these two platforms, organizations can ensure seamless user authentication, improved user experience, and simplified administration.<\/p>\n\n\n\n<p>This guide will walk you through the setup process, from creating an Enterprise application in Microsoft Entra to configuring Couchbase Server as a SAML Service Provider. Whether you&#8217;re a security admin or an Azure AD admin, this guide will help you successfully implement SAML-based SSO between Microsoft Entra and Couchbase Server. Let\u2019s dive in!<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span>Prerequisites<\/span><\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><span>Admin access to Azure AD, e.g., the ability to set up a new Enterprise application<\/span><\/li>\n\n\n<li><span>Security Admin access to Couchbase<\/span><\/li>\n\n\n<li><span>Familiarity with XML-based SAML configurations<\/span><\/li>\n\n\n<li><span>Existing users in Azure<\/span><\/li>\n\n\n<li><span>Read the earlier blog article on <\/span><a href=\"https:\/\/www.couchbase.com\/blog\/saml-sso-with-couchbase-server\/\"><span>Getting ready for SAML<\/span><\/a><span>.<\/span><\/li>\n\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><span>Setting Up Microsoft Entra<\/span><\/h2>\n\n\n\n<h3 class=\"wp-block-heading\"><span>Create an Enterprise Application<\/span><\/h3>\n\n\n\n<ol class=\"wp-block-list\">\n<li><span>Log into the Azure Portal.<\/span><\/li>\n\n\n<li><span>Navigate to <strong>Microsoft Entra ID<\/strong> &gt; <strong>Enterprise applications<\/strong> &gt; <strong>+ New application<\/strong>.<\/span><\/li>\n\n\n<li><span>Click on <strong>+ Create your own application<\/strong>.<\/span><\/li>\n\n\n<li><span>Provide a name for your application and select: <\/span><span><em>Integrate any other application you don&#8217;t find in the gallery (Non-gallery).<br>\n<a href=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/2024\/04\/image17.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-15643\" src=\"https:\/\/www.couchbase.com\/wp-content\/uploads\/sites\/5\/2026\/05\/image17-1024x645-1.png\" alt=\"\" width=\"529\" height=\"333\"><\/a><br>\n<\/em><\/span><\/li>\n\n\n<li>Click <strong>CREATE<\/strong>.<\/li>\n\n<\/ol>\n\n\n\n<p><b>Please note: <\/b><span>Azure will recommend several gallery options such as Couchbase Capella. For the on-premise edition you will need to ignore that as that option only works with our Capella offering.<\/span><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span>Configure Single Sign-On<\/span><\/h3>\n\n\n\n<ol class=\"wp-block-list\">\n<li><span>The newly created application will open, then click on the <strong>Set up Single sign-on<\/strong>.<br>\n<a href=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/2024\/04\/image18.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-15644\" src=\"https:\/\/www.couchbase.com\/wp-content\/uploads\/sites\/5\/2026\/05\/image18-1024x850-1.png\" alt=\"\" width=\"631\" height=\"524\"><\/a><br>\n<\/span><\/li>\n\n\n<li><span>Choose the <strong>SAML<\/strong> option on the <em>Select a single sign-on method screen.<br>\n<a href=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/2024\/04\/image11-1.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-15645\" src=\"https:\/\/www.couchbase.com\/wp-content\/uploads\/sites\/5\/2026\/05\/image11-1-1024x243-1.png\" alt=\"\" width=\"643\" height=\"153\"><\/a><br>\n<\/em><\/span><\/li>\n\n\n<li><span>Under <em>Basic SAML Configuration<\/em>, you&#8217;ll need to fill in the following:<\/span><\/li>\n\n\n<li><b>Identifier<\/b><span> (Entity ID): The Entity ID your service provider. For illustration purposes, <\/span><em>couchbase<\/em><span> will be used as an example. However, feel free to substitute it with any identifier of your choice.<\/span><\/li>\n\n\n<li><b>Reply URL<\/b><span> (Assertion Consumer Service URL): URL where SAML assertions should be sent. I am going to use a <\/span><b>placeholder<\/b><span> here until the second part of the setup is completed: <\/span><a href=\"https:\/\/www.mydomain.com\/\"><span>https:\/\/www.mydomain.com<\/span><\/a>.<br>\n<a href=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/2024\/04\/image1-4.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-15646\" src=\"https:\/\/www.couchbase.com\/wp-content\/uploads\/sites\/5\/2026\/05\/image1-4-1024x657-1.png\" alt=\"\" width=\"601\" height=\"385\"><\/a><\/li>\n\n\n<li><b>Save<\/b> your changes.<\/li>\n\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\"><span>Collect SAML Information<\/span><\/h3>\n\n\n\n<p><span>Collect the following information:<\/span><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><span>Download <\/span><b>Certifica<\/b><strong>te (Base64)<\/strong><\/li>\n\n\n<li><span>Download <\/span><b>Federation Metadata<\/b><strong> XML<\/strong><span><br>\n<\/span><span><a href=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/2024\/04\/image20.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-15647\" src=\"https:\/\/www.couchbase.com\/wp-content\/uploads\/sites\/5\/2026\/05\/image20-1024x340-1.png\" alt=\"\" width=\"599\" height=\"199\"><\/a><\/span><span><br>\n<\/span><\/li>\n\n\n<li><b>Login URL:<\/b><span> Found on the Section 4 called Set up <\/span><span><br>\n<\/span><span><a href=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/2024\/04\/image15-1.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-15648\" src=\"https:\/\/www.couchbase.com\/wp-content\/uploads\/sites\/5\/2026\/05\/image15-1-1024x245-1.png\" alt=\"\" width=\"627\" height=\"150\"><\/a><\/span><span><br>\n<\/span><\/li>\n\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><span>Setting up Couchbase as a SAML SP<\/span><\/h2>\n\n\n\n<h3 class=\"wp-block-heading\"><span>Configuring the Service Provider<\/span><\/h3>\n\n\n\n<ol class=\"wp-block-list\">\n<li><span>Login to your Couchbase UI.<\/span><\/li>\n\n\n<li><span>Select <\/span><b>Security<\/b><span> on the left hand side navigation:<br>\n<a href=\"https:\/\/www.couchbase.com\/wp-content\/uploads\/sites\/5\/2026\/05\/image9-1-1.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-15649\" src=\"https:\/\/www.couchbase.com\/wp-content\/uploads\/sites\/5\/2026\/05\/image9-1-1.png\" alt=\"\" width=\"117\" height=\"265\"><\/a><\/span><\/li>\n\n\n<li><span>Click on the <\/span><b>SAML<\/b><span> tab on the top:<br>\n<\/span><span><a href=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/2024\/04\/image21.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-15650\" src=\"https:\/\/www.couchbase.com\/wp-content\/uploads\/sites\/5\/2026\/05\/image21-1024x76-1.png\" alt=\"\" width=\"618\" height=\"46\"><\/a><\/span><span><br>\n<\/span><\/li>\n\n\n<li><span>Enable <\/span><b>SAML<\/b><span> by clicking on the checkbox.<\/span><\/li>\n\n\n<li><span>Open\u00a0 <\/span><b>Metadata<\/b><span>\u00a0In the <em>Service Provide Configuration<\/em> section.<\/span><\/li>\n\n\n<li><span>Input your <em>SP Entity ID<\/em>: (example: <\/span><b>couchbase<\/b><span>).<\/span><\/li>\n\n\n<li><span>Select your <em>SP Base URL Type<\/em>. For example <em>custom URL<\/em> &gt; <\/span><a href=\"https:\/\/127.0.0.1:8091\/\"><span>https:\/\/127.0.0.1:8091<\/span><\/a>.<br>\n<a href=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/2024\/04\/image3-2.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-15651\" src=\"https:\/\/www.couchbase.com\/wp-content\/uploads\/sites\/5\/2026\/05\/image3-2-1024x680-1.png\" alt=\"\" width=\"601\" height=\"399\"><\/a><\/li>\n\n\n<li><span>Open <\/span><b>Key and Certificates<\/b><span>\u00a0In the <em>Service Provide Configuration<\/em> section.<\/span><\/li>\n\n\n<li><span>Upload a <\/span><b>Private key<\/b><span> and a <\/span><b>Certificate<\/b><span> that will be used to sign SAML Assertions.<\/span><\/li>\n\n\n<li><span>Upload any intermediate certificates (optional) in the Certificate chain section if needed. They will be passed to the IDP as metadata.<br>\n<a href=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/2024\/04\/image22.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-15652\" src=\"https:\/\/www.couchbase.com\/wp-content\/uploads\/sites\/5\/2026\/05\/image22-1024x550-1.png\" alt=\"\" width=\"602\" height=\"323\"><\/a><br>\n<\/span><\/li>\n\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\"><span>Configuring the Identity Provider<\/span><\/h3>\n\n\n\n<ol class=\"wp-block-list\">\n<li><span>Open <\/span><b>Metadata<\/b><span> in the<em> Identity Provider Configuration<\/em> section.<\/span><\/li>\n\n\n<li><span>Click on the <strong>File<\/strong> option in <em>Load IDP metadata from<\/em> option.<\/span><\/li>\n\n\n<li><span>Click on <\/span><b>Select file<\/b><span> and upload the metadata XML file you downloaded in the earlier step.<br>\n<a href=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/2024\/04\/image16.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-15653\" src=\"https:\/\/www.couchbase.com\/wp-content\/uploads\/sites\/5\/2026\/05\/image16-1024x460-1.png\" alt=\"\" width=\"599\" height=\"269\"><\/a><\/span><span><br>\n<\/span><\/li>\n\n\n<li><span>Also upload the CA certificate you downloaded earlier into the CA Certificates option.<br>\n<a href=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/2024\/04\/image4-2.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-15654\" src=\"https:\/\/www.couchbase.com\/wp-content\/uploads\/sites\/5\/2026\/05\/image4-2-1024x326-1.png\" alt=\"\" width=\"599\" height=\"191\"><\/a><\/span><span><br>\n<\/span><\/li>\n\n\n<li><span>Open <\/span><b>Single Sign-On<\/b><span> in the Settings section.<\/span><\/li>\n\n\n<li><span>Make sure the Validate assertion envelope signature is unticked (off).<br>\n<\/span><span><a href=\"https:\/\/www.couchbase.com\/wp-content\/uploads\/sites\/5\/2026\/05\/image19-1.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-15655\" src=\"https:\/\/www.couchbase.com\/wp-content\/uploads\/sites\/5\/2026\/05\/image19-1.png\" alt=\"\" width=\"417\" height=\"284\"><\/a><\/span><\/li>\n\n\n<li><span>Enable <em>Username attribute<\/em> claim handling by ticking the <strong>Username attribute<\/strong> checkbox and fill in the following attribute name: <\/span><span><br>\n<\/span>\n<p><p>[crayon nums=&#8221;false&#8221; lang=&#8221;default&#8221; decode=&#8221;true&#8221;]https:\/\/schemas.xmlsoap.org\/ws\/2005\/05\/identity\/claims\/name in order to use the email address of the Azure user inside Couchbase as a username<br \/>\n[\/crayon]<\/p>\n<\/p>\n<p><a href=\"https:\/\/www.couchbase.com\/wp-content\/uploads\/sites\/5\/2026\/05\/image12-1-1.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-15656\" src=\"https:\/\/www.couchbase.com\/wp-content\/uploads\/sites\/5\/2026\/05\/image12-1-1.png\" alt=\"\" width=\"500\" height=\"141\"><\/a><\/p><\/li>\n\n\n<li><span>Make sure you configure group and roles claim handling as well, the exact details of this is outside of the scope of this guide.<\/span><\/li>\n\n\n<li><span>Click\u00a0<strong>SAVE<\/strong>.<\/span><\/li>\n\n<\/ol>\n\n\n\n<p>\u00a0<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span>Collect SP Metadata Information<\/span><\/h3>\n\n\n\n<p><span>Having successfully saved the SAML settings, the next step is to scroll up to the top of the <em>SAML Configuration<\/em> page and collect the following information:<br>\n<\/span><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><span>Current SP consume URL: click on the <strong>Copy URL<\/strong> link<\/span><\/li>\n\n<\/ul>\n\n\n\n<p><a href=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/2024\/04\/image5-2.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-15657\" src=\"https:\/\/www.couchbase.com\/wp-content\/uploads\/sites\/5\/2026\/05\/image5-2-1024x207-1.png\" alt=\"\" width=\"598\" height=\"121\"><\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span>Finish Setting Up Microsoft Entra<\/span><\/h2>\n\n\n\n<p><span>Go back to Azure and open the Set up Single Sign-on with SAML section of the Enterprise application we have just created.<\/span><\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><span>Under <em>Basic SAML Configuration<\/em>, you&#8217;ll need to change the following:<\/span>\n<ul>\n<li><span><em>Reply URL (Assertion Consumer Service URL)<\/em>. Paste the URL of the Current SP consume URL:<br>\n<a href=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/2024\/04\/image7-1.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-15658\" src=\"https:\/\/www.couchbase.com\/wp-content\/uploads\/sites\/5\/2026\/05\/image7-1-1024x250-1.png\" alt=\"\" width=\"597\" height=\"146\"><\/a><\/span><span><br>\n<\/span><\/li>\n<\/ul>\n<\/li>\n\n\n<li><span>Make sure you assign Users to this application. It is important that you assign users in the Microsoft Entra application so that you can test a user login.<\/span><\/li>\n\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\"><span>Mapping Entra Users to Couchbase Server Users<\/span><\/h2>\n\n\n\n<p><span>After successfully configuring Microsoft Entra as your Identity Provider (IdP) and Couchbase Server as the Service Provider (SP), the next step is to ensure that user attributes are correctly mapped between them.\u00a0<\/span><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span>User to User Mapping<\/span><\/h3>\n\n\n\n<p><span>The most simple way to map users is to create external users in Couchbase Server that match the users in Entra. In this example I did just that.\u00a0<\/span><\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><b>Find an email in Entra<\/b><span>: Go back to your Microsoft Entra Application and find the email address of a user you assigned to this application. We are going to use this user later on to test the integration.<\/span><\/li>\n\n\n<li><b>Open Couchbase Server UI<\/b><span>: Open Couchbase Server UI.<\/span><\/li>\n\n\n<li><b>Click on Security<\/b><span>: On the left you can find the security link.<\/span><\/li>\n\n\n<li><b>Open the Users tab<\/b><span>: On the top you will find the <strong>Users &amp; Groups <\/strong>tab click on that to list the users in Couchbase Server.<br>\n<a href=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/2024\/04\/image6-1.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-15659\" src=\"https:\/\/www.couchbase.com\/wp-content\/uploads\/sites\/5\/2026\/05\/image6-1-1024x54-1.png\" alt=\"\" width=\"594\" height=\"31\"><\/a><\/span><span><br>\n<\/span><\/li>\n\n\n<li><b>Add user<\/b><span>: Click on the <strong>Add user<\/strong> button on the top right corner.<\/span><\/li>\n\n\n<li><b>External user<\/b><span>: You need to make sure you set up your user as\u00a0 <em>External &#8211;<\/em>\u00a0<\/span><a href=\"https:\/\/docs.couchbase.com\/server\/current\/manage\/manage-security\/manage-users-and-roles.html#adding-an-externally-authenticated-user\"><span>see our documentation<\/span><\/a> for more details<span>.<\/span><\/li>\n\n\n<li><b>Fill in username:<\/b><span> You copy the Entra email address into this field.<br>\n<a href=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/2024\/04\/image10-1.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-15660\" src=\"https:\/\/www.couchbase.com\/wp-content\/uploads\/sites\/5\/2026\/05\/image10-1-1024x278-1.png\" alt=\"\" width=\"601\" height=\"163\"><\/a><\/span><span><br>\n<\/span><\/li>\n\n\n<li><b>Set up roles:<\/b><span> On the right hand side you need to select the exact roles your user should have.<\/span><\/li>\n\n\n<li><b>Set up Groups:<\/b><span> (Optional) You can also add your external user to any Couchbase Server groups you specified earlier.<\/span><\/li>\n\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\"><span>Testing<\/span><\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><span>Open your Couchbase UI in an incognito window.<\/span><\/li>\n\n\n<li><span>Notice the new button called <strong>Sign in Using SSO<\/strong>:<br>\n<a href=\"https:\/\/www.couchbase.com\/wp-content\/uploads\/sites\/5\/2026\/05\/image2-2-3.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-15661\" src=\"https:\/\/www.couchbase.com\/wp-content\/uploads\/sites\/5\/2026\/05\/image2-2-3.png\" alt=\"\" width=\"450\" height=\"331\"><\/a><\/span><span><br>\n<\/span><\/li>\n\n\n<li><span>Click on Sign In Using SSO.<\/span><\/li>\n\n\n<li><span>You will be redirected to Microsoft Entra to login.<\/span><\/li>\n\n<\/ul>\n\n\n\n<p><span>Congratulations! If you&#8217;ve followed along with this comprehensive guide, you should now have a fully functional SAML-based Single Sign-On (SSO) between Microsoft Entra and Couchbase Server.<\/span><\/p>\n\n\n\n<p><span>We&#8217;ve walked through the essential steps to set up this connection, and I hope you find this guide useful. If you encounter any challenges or have further questions, feel free to reach out through our support channels.<\/span><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span>Troubleshooting<\/span><\/h2>\n\n\n\n<figure class=\"wp-block-table\"><table>\n<tbody>\n<tr>\n<td><strong>Access denied for user &#8220;username@domain.com&#8221;: Insufficient Permissions<\/strong><\/td>\n<td><span>This means that the external user does not have any roles in Couchbase. <\/span><span><br>\n<\/span><span>You need to either map group or roles claims and configure roles in Couchbase or alternatively you can <\/span><a href=\"https:\/\/docs.couchbase.com\/server\/current\/manage\/manage-security\/manage-users-and-roles.html#adding-an-externally-authenticated-user\"><span>create an external user<\/span><\/a><span> using the Couchbase UI and assign roles to that user manually. \u00a0<\/span><a href=\"https:\/\/docs.couchbase.com\/server\/current\/manage\/manage-security\/manage-users-and-roles.html#adding-an-externally-authenticated-user\"><span>See our security documentation for more detail.<\/span><\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>In today&#8217;s digital landscape, businesses are continuously seeking efficient ways to manage their access control and authentication processes. Integrating Microsoft Entra (formerly known as Azure AD) with Couchbase Server offers a robust and secure solution for single sign-on (SSO) using SAML. This integration enhances security and streamlines user management by leveraging Entra\u2019s comprehensive identity and [&hellip;]<\/p>\n","protected":false},"author":84313,"featured_media":3555,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[136,54,94],"tags":[98,826,790],"ppma_author":[651],"class_list":["post-3558","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-best-practices-and-tutorials","category-couchbase-server","category-security","tag-microsoft-azure","tag-saml","tag-sso"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.6 (Yoast SEO v27.6) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Couchbase &amp; Microsoft Entra: SAML SSO Integration Guide<\/title>\n<meta name=\"description\" content=\"Set up Microsoft Entra Single Sign-On (SSO) with Couchbase Server for centralized user management, multi-factor authentication (MFA), &amp; enhanced security.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.couchbase.com\/blog\/saml-integration-microsoft-entra\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"SAML Integration Simplified: Connecting Microsoft Entra with Couchbase Server for Secure SSO\" \/>\n<meta property=\"og:description\" content=\"Set up Microsoft Entra Single Sign-On (SSO) with Couchbase Server for centralized user management, multi-factor authentication (MFA), &amp; enhanced security.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.couchbase.com\/blog\/saml-integration-microsoft-entra\/\" \/>\n<meta property=\"og:site_name\" content=\"The Couchbase Blog\" \/>\n<meta property=\"article:published_time\" content=\"2024-04-26T17:47:21+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/5\/2026\/05\/image14-transformed.png\" \/>\n\t<meta property=\"og:image:width\" content=\"2048\" \/>\n\t<meta property=\"og:image:height\" content=\"2048\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Istvan Orban, Principal Product Manager\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Istvan Orban, Principal Product Manager\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/pt\\\/saml-integration-microsoft-entra\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/pt\\\/saml-integration-microsoft-entra\\\/\"},\"author\":{\"name\":\"Istvan Orban, Principal Product Manager\",\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/#\\\/schema\\\/person\\\/da80693db66ef61daaabe98bc56afc26\"},\"headline\":\"SAML Integration Simplified: Connecting Microsoft Entra with Couchbase Server for Secure SSO\",\"datePublished\":\"2024-04-26T17:47:21+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/pt\\\/saml-integration-microsoft-entra\\\/\"},\"wordCount\":1188,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/pt\\\/saml-integration-microsoft-entra\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/5\\\/2026\\\/05\\\/image14-transformed.png\",\"keywords\":[\"Microsoft Azure\",\"SAML\",\"SSO\"],\"articleSection\":[\"Best Practices and Tutorials\",\"Couchbase Server\",\"Security\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/pt\\\/saml-integration-microsoft-entra\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/pt\\\/saml-integration-microsoft-entra\\\/\",\"url\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/pt\\\/saml-integration-microsoft-entra\\\/\",\"name\":\"Couchbase & Microsoft Entra: SAML SSO Integration Guide\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/pt\\\/saml-integration-microsoft-entra\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/pt\\\/saml-integration-microsoft-entra\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/5\\\/2026\\\/05\\\/image14-transformed.png\",\"datePublished\":\"2024-04-26T17:47:21+00:00\",\"description\":\"Set up Microsoft Entra Single Sign-On (SSO) with Couchbase Server for centralized user management, multi-factor authentication (MFA), & enhanced security.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/pt\\\/saml-integration-microsoft-entra\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/pt\\\/saml-integration-microsoft-entra\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/pt\\\/saml-integration-microsoft-entra\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/5\\\/2026\\\/05\\\/image14-transformed.png\",\"contentUrl\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/5\\\/2026\\\/05\\\/image14-transformed.png\",\"width\":2048,\"height\":2048},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/pt\\\/saml-integration-microsoft-entra\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"SAML Integration Simplified: Connecting Microsoft Entra with Couchbase Server for Secure SSO\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/\",\"name\":\"The Couchbase Blog\",\"description\":\"Couchbase, the NoSQL Database\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/#organization\",\"name\":\"The Couchbase Blog\",\"url\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/5\\\/2026\\\/06\\\/logo.svg\",\"contentUrl\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/5\\\/2026\\\/06\\\/logo.svg\",\"width\":\"1024\",\"height\":\"1024\",\"caption\":\"The Couchbase Blog\"},\"image\":{\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/#\\\/schema\\\/person\\\/da80693db66ef61daaabe98bc56afc26\",\"name\":\"Istvan Orban, Principal Product Manager\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e9cd4de97ab3b6e0a219e0b467b88ea85c7ff3b03396cd7f444828012befe66a?s=96&d=mm&r=g1f058fdc7ceeed323cb0993693c690e0\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e9cd4de97ab3b6e0a219e0b467b88ea85c7ff3b03396cd7f444828012befe66a?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e9cd4de97ab3b6e0a219e0b467b88ea85c7ff3b03396cd7f444828012befe66a?s=96&d=mm&r=g\",\"caption\":\"Istvan Orban, Principal Product Manager\"},\"description\":\"Istvan Orban is the Principal Product Manager for Couchbase and lives in the United Kingdom. Istvan has a wide range of experience as a Full stack Software Engineer, Team leader and Devops Engineer. His main focus is security and Single Sign On. Istvan has led several large scale projects of his 20 year professional career.\",\"url\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/author\\\/istvanorban\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Couchbase & Microsoft Entra: SAML SSO Integration Guide","description":"Set up Microsoft Entra Single Sign-On (SSO) with Couchbase Server for centralized user management, multi-factor authentication (MFA), & enhanced security.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.couchbase.com\/blog\/saml-integration-microsoft-entra\/","og_locale":"en_US","og_type":"article","og_title":"SAML Integration Simplified: Connecting Microsoft Entra with Couchbase Server for Secure SSO","og_description":"Set up Microsoft Entra Single Sign-On (SSO) with Couchbase Server for centralized user management, multi-factor authentication (MFA), & enhanced security.","og_url":"https:\/\/www.couchbase.com\/blog\/saml-integration-microsoft-entra\/","og_site_name":"The Couchbase Blog","article_published_time":"2024-04-26T17:47:21+00:00","og_image":[{"width":2048,"height":2048,"url":"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/5\/2026\/05\/image14-transformed.png","type":"image\/png"}],"author":"Istvan Orban, Principal Product Manager","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Istvan Orban, Principal Product Manager","Est. reading time":"9 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.couchbase.com\/blog\/pt\/saml-integration-microsoft-entra\/#article","isPartOf":{"@id":"https:\/\/www.couchbase.com\/blog\/pt\/saml-integration-microsoft-entra\/"},"author":{"name":"Istvan Orban, Principal Product Manager","@id":"https:\/\/www.couchbase.com\/blog\/#\/schema\/person\/da80693db66ef61daaabe98bc56afc26"},"headline":"SAML Integration Simplified: Connecting Microsoft Entra with Couchbase Server for Secure SSO","datePublished":"2024-04-26T17:47:21+00:00","mainEntityOfPage":{"@id":"https:\/\/www.couchbase.com\/blog\/pt\/saml-integration-microsoft-entra\/"},"wordCount":1188,"commentCount":0,"publisher":{"@id":"https:\/\/www.couchbase.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.couchbase.com\/blog\/pt\/saml-integration-microsoft-entra\/#primaryimage"},"thumbnailUrl":"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/5\/2026\/05\/image14-transformed.png","keywords":["Microsoft Azure","SAML","SSO"],"articleSection":["Best Practices and Tutorials","Couchbase Server","Security"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.couchbase.com\/blog\/pt\/saml-integration-microsoft-entra\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.couchbase.com\/blog\/pt\/saml-integration-microsoft-entra\/","url":"https:\/\/www.couchbase.com\/blog\/pt\/saml-integration-microsoft-entra\/","name":"Couchbase & Microsoft Entra: SAML SSO Integration Guide","isPartOf":{"@id":"https:\/\/www.couchbase.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.couchbase.com\/blog\/pt\/saml-integration-microsoft-entra\/#primaryimage"},"image":{"@id":"https:\/\/www.couchbase.com\/blog\/pt\/saml-integration-microsoft-entra\/#primaryimage"},"thumbnailUrl":"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/5\/2026\/05\/image14-transformed.png","datePublished":"2024-04-26T17:47:21+00:00","description":"Set up Microsoft Entra Single Sign-On (SSO) with Couchbase Server for centralized user management, multi-factor authentication (MFA), & enhanced security.","breadcrumb":{"@id":"https:\/\/www.couchbase.com\/blog\/pt\/saml-integration-microsoft-entra\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.couchbase.com\/blog\/pt\/saml-integration-microsoft-entra\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.couchbase.com\/blog\/pt\/saml-integration-microsoft-entra\/#primaryimage","url":"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/5\/2026\/05\/image14-transformed.png","contentUrl":"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/5\/2026\/05\/image14-transformed.png","width":2048,"height":2048},{"@type":"BreadcrumbList","@id":"https:\/\/www.couchbase.com\/blog\/pt\/saml-integration-microsoft-entra\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.couchbase.com\/blog\/"},{"@type":"ListItem","position":2,"name":"SAML Integration Simplified: Connecting Microsoft Entra with Couchbase Server for Secure SSO"}]},{"@type":"WebSite","@id":"https:\/\/www.couchbase.com\/blog\/#website","url":"https:\/\/www.couchbase.com\/blog\/","name":"The Couchbase Blog","description":"Couchbase, the NoSQL Database","publisher":{"@id":"https:\/\/www.couchbase.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.couchbase.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.couchbase.com\/blog\/#organization","name":"The Couchbase Blog","url":"https:\/\/www.couchbase.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.couchbase.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/5\/2026\/06\/logo.svg","contentUrl":"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/5\/2026\/06\/logo.svg","width":"1024","height":"1024","caption":"The Couchbase Blog"},"image":{"@id":"https:\/\/www.couchbase.com\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.couchbase.com\/blog\/#\/schema\/person\/da80693db66ef61daaabe98bc56afc26","name":"Istvan Orban, Principal Product Manager","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/e9cd4de97ab3b6e0a219e0b467b88ea85c7ff3b03396cd7f444828012befe66a?s=96&d=mm&r=g1f058fdc7ceeed323cb0993693c690e0","url":"https:\/\/secure.gravatar.com\/avatar\/e9cd4de97ab3b6e0a219e0b467b88ea85c7ff3b03396cd7f444828012befe66a?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e9cd4de97ab3b6e0a219e0b467b88ea85c7ff3b03396cd7f444828012befe66a?s=96&d=mm&r=g","caption":"Istvan Orban, Principal Product Manager"},"description":"Istvan Orban is the Principal Product Manager for Couchbase and lives in the United Kingdom. Istvan has a wide range of experience as a Full stack Software Engineer, Team leader and Devops Engineer. His main focus is security and Single Sign On. Istvan has led several large scale projects of his 20 year professional career.","url":"https:\/\/www.couchbase.com\/blog\/author\/istvanorban\/"}]}},"acf":[],"authors":[{"term_id":651,"user_id":84313,"is_guest":0,"slug":"istvanorban","display_name":"Istvan Orban, Principal Product Manager","avatar_url":{"url":"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/5\/2026\/05\/image_2023-04-25_205027722-17.png","url2x":"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/5\/2026\/05\/image_2023-04-25_205027722-17.png"},"0":null,"1":"","2":"","3":"","4":"","5":"","6":"","7":"","8":""}],"_links":{"self":[{"href":"https:\/\/www.couchbase.com\/blog\/wp-json\/wp\/v2\/posts\/3558","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.couchbase.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.couchbase.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.couchbase.com\/blog\/wp-json\/wp\/v2\/users\/84313"}],"replies":[{"embeddable":true,"href":"https:\/\/www.couchbase.com\/blog\/wp-json\/wp\/v2\/comments?post=3558"}],"version-history":[{"count":0,"href":"https:\/\/www.couchbase.com\/blog\/wp-json\/wp\/v2\/posts\/3558\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.couchbase.com\/blog\/wp-json\/wp\/v2\/media\/3555"}],"wp:attachment":[{"href":"https:\/\/www.couchbase.com\/blog\/wp-json\/wp\/v2\/media?parent=3558"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.couchbase.com\/blog\/wp-json\/wp\/v2\/categories?post=3558"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.couchbase.com\/blog\/wp-json\/wp\/v2\/tags?post=3558"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.couchbase.com\/blog\/wp-json\/wp\/v2\/ppma_author?post=3558"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}