S
NTMS SAML 2.0 Enterprise SSO

saml.ntmscloud.in • Microsoft Entra ID IdP

SAML 2.0 Web Browser SSO Profile

Enterprise SAML 2.0 Single Sign-On with Microsoft Entra ID

While modern SPAs and mobile apps use OpenID Connect (JWTs), thousands of enterprise business applications (Salesforce, ServiceNow, Workday, SAP) authenticate via XML-based SAML 2.0 Assertions. This portal acts as your dedicated SAML Service Provider (SP).

🚀 Initiate SAML SP Sign-In 📄 View SP Metadata XML 🔍 Open SAML Decoder
SP

Service Provider (SP) Configuration

Enter these exact values in Microsoft Entra ID Enterprise Application SSO settings:

Identifier (Entity ID): https://saml.ntmscloud.in/saml/metadata
Reply URL (Assertion Consumer Service / ACS): https://saml.ntmscloud.in/saml/acs
Sign-on URL (SP-Initiated): https://saml.ntmscloud.in/saml/login
IdP

Identity Provider (Microsoft Entra ID)

Values retrieved from Microsoft Entra ID Federation Metadata:

Microsoft Entra Identifier (IdP Entity ID): https://sts.windows.net/9e615794-d368-4fde-9aea-afdc8428411c/
Login URL (IdP SSO Endpoint): https://login.microsoftonline.com/9e615794-d368-4fde-9aea-afdc8428411c/saml2
Signature Algorithm: RSA-SHA256 with X.509 Certificate

How SAML 2.0 Web SSO Works: The 4 Protocol Steps

1

SP-Initiated Request

User visits our portal. SP creates a deflated Base64 <samlp:AuthnRequest> and redirects the browser to Microsoft Entra ID.

2

Entra ID Authentication

User authenticates with Microsoft credentials, MFA, and Conditional Access policies on login.microsoftonline.com.

3

SAMLResponse POST

Entra ID mints an XML Assertion, signs it with its private X.509 key, and renders an auto-submitting HTML form posting to our /saml/acs URL.

4

Assertion Validation

Our ACS endpoint verifies the XML digital signature against Microsoft's certificate, reads user claims, and creates the authenticated session.