Microsoft Entra to 2Checkout cPanel – SSO Integration Setup Guide

This guide walks you through configuring Microsoft Entra as an Identity Provider (IdP) for Single Sign-On (SSO) access to your 2Checkout cPanel using SAML 2.0.

Prerequisites

• Admin access to your Microsoft Entra Admin Center

• A 2Checkout representative contact to share configuration details with

Setup and configuration

1

Create a new enterprise application

• Log in to the Microsoft Entra Admin Center at entra.microsoft.com.

• In the left-hand navigation menu, go to Enterprise apps → All applications.

• Click + Create your own application.

• In the panel that opens, enter a name for your app (e.g., 2Checkout cPanel SSO).

• Select "Integrate any other application you don't find in the gallery (Non-gallery)".

• Click Create.

2

Select the Single Sign-On method

Once the application is created, navigate to Single sign-on in the left-hand menu under Manage.

On the Select a single sign-on method screen, click SAML.

3

Configure Basic SAML settings

In the Set up Single Sign-On with SAML page, click Edit on the Basic SAML Configuration section.

Fill in the following fields:

Field	Value
Identifier (Entity ID)	https://secure.2checkout.com/cpanel/saml-login
Reply URL (Assertion Consumer Service URL)	https://secure.2checkout.com/cpanel/saml-login
Sign on URL	Leave blank (Optional)
Relay State	https://secure.2checkout.com/cpanel/saml-login
Logout URL	Leave blank (Optional)

Click Save and close the panel.

4

Configure the SAML signing certificate

• On the Set up Single Sign-On with SAML page, scroll down to section 3 – SAML Certificates.

• Click the Edit (pencil) icon to open the SAML Signing Certificate panel.

• Set the Signing Option to "Sign SAML response and assertion".

• Click Save and close the panel.

5

Retrieve and share the SAML certificate details

• On the Set up Single Sign-On with SAML page, scroll down to section 3 – SAML Certificates.

• Collect all of the following and send them to your 2Checkout representative:

  • App Federation Metadata URL — copy the URL from the field and include it in your email.

  • Federation Metadata XML — click Download next to Federation Metadata XML and attach the file.

  • Certificate (Base64) — click Download next to Certificate (Base64) and attach the file.

• Your 2Checkout representative will advise which of these they require to complete the configuration on their end.

6

Assign a test user

Before rolling out SSO to all users, validate the integration with a single test account:

• In the left-hand menu, go to Users and groups.

• Click + Add user/group.

• Select a test user and click Assign.

• Notify your 2Checkout representative that a test user has been assigned and that you are ready to begin testing.

7

Full rollout

Once testing is successful with the test user:

• Return to Users and groups.

• Add the remaining users or groups to the application

Need help?

If you encounter any issues during setup, contact your 2Checkout representative for assistance.

---

_{This document was generated with the assistance of AI and has been reviewed and verified by a 2Checkout team member. The information contained in this document was tested and verified using a Microsoft Entra trial licence. Setup steps may differ for full licence or on-premises installations.}