> For the complete documentation index, see [llms.txt](https://docs.2checkout.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.2checkout.com/get-started/getting-started/activate-your-account/universal-sso-with-2checkout-saml-based/microsoft-entra-to-2checkout-cpanel-sso-integration-setup-guide.md).

# Microsoft Entra to 2Checkout cPanel – SSO Integration Setup Guide

This guide walks you through configuring Microsoft Entra as an Identity Provider (IdP) for Single Sign-On (SSO) access to your 2Checkout cPanel using SAML 2.0.

## Prerequisites

* Admin access to your Microsoft Entra Admin Center
* A 2Checkout representative contact to share configuration details with

## Setup and configuration

{% stepper %}
{% step %}

### Create a new enterprise application

* Log in to the **Microsoft Entra Admin Center** at [entra.microsoft.com](https://entra.microsoft.com/).
* In the left-hand navigation menu, go to **Enterprise apps → All applications**.
* Click **+** **Create your own application**.
* In the panel that opens, enter a name for your app (e.g., 2Checkout cPanel SSO).
* Select **"Integrate any other application you don't find in the gallery (Non-gallery)"**.
* Click **Create**.
  {% endstep %}

{% step %}

### Select the Single Sign-On method

Once the application is created, navigate to **Single sign-on** in the left-hand menu under **Manage**.

On the **Select a single sign-on method** screen, click **SAML**.
{% endstep %}

{% step %}

### Configure Basic SAML settings

In the **Set up Single Sign-On with SAML** page, click **Edit** on the **Basic SAML Configuration** section.

Fill in the following fields:

<table><thead><tr><th width="273">Field</th><th>Value</th></tr></thead><tbody><tr><td><strong>Identifier (Entity ID)</strong></td><td><a href="https://secure.2checkout.com/cpanel/saml-login">https://secure.2checkout.com/cpanel/saml-login</a></td></tr><tr><td><strong>Reply URL (Assertion Consumer Service URL)</strong></td><td><a href="https://secure.2checkout.com/cpanel/saml-login">https://secure.2checkout.com/cpanel/saml-login</a></td></tr><tr><td><strong>Sign on URL</strong></td><td>Leave blank (Optional)</td></tr><tr><td><strong>Relay State</strong></td><td><a href="https://secure.2checkout.com/cpanel/saml-login">https://secure.2checkout.com/cpanel/saml-login</a></td></tr><tr><td><strong>Logout URL</strong></td><td>Leave blank (Optional)</td></tr></tbody></table>

Click **Save** and close the panel.
{% endstep %}

{% step %}

### Configure the SAML signing certificate

* On the **Set up Single Sign-On with SAML** page, scroll down to section **3 – SAML Certificates**.
* Click the **Edit** (pencil) icon to open the **SAML Signing Certificate** panel.
* Set the **Signing Option** to **"Sign SAML response and assertion"**.
* Click **Save** and close the panel.
  {% endstep %}

{% step %}

### Retrieve and share the SAML certificate details

* On the **Set up Single Sign-On with SAML** page, scroll down to section **3 – SAML Certificates**.
* Collect all of the following and send them to your 2Checkout representative:
  * **App Federation Metadata URL** — copy the URL from the field and include it in your email.
  * **Federation Metadata XML** — click **Download** next to Federation Metadata XML and attach the file.
  * **Certificate (Base64)** — click **Download** next to Certificate (Base64) and attach the file.
* Your 2Checkout representative will advise which of these they require to complete the configuration on their end.
  {% endstep %}

{% step %}

### Assign a test user

Before rolling out SSO to all users, validate the integration with a single test account:

* In the left-hand menu, go to **Users and groups**.
* Click **+ Add user/group**.
* Select a test user and click **Assign**.
* Notify your 2Checkout representative that a test user has been assigned and that you are ready to begin testing.
  {% endstep %}

{% step %}

### Full rollout

Once testing is successful with the test user:

* Return to **Users and groups**.
* Add the remaining users or groups to the application
  {% endstep %}
  {% endstepper %}

#### Need help?

If you encounter any issues during setup, contact your 2Checkout representative for assistance.

***

<sub>*This document was generated with the assistance of AI and has been reviewed and verified by a 2Checkout team member.*</sub>\ <sub>*The information contained in this document was tested and verified using a Microsoft Entra trial licence. Setup steps may differ for full licence or on-premises installations.*</sub>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.2checkout.com/get-started/getting-started/activate-your-account/universal-sso-with-2checkout-saml-based/microsoft-entra-to-2checkout-cpanel-sso-integration-setup-guide.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.