Set Up Azure SSO in OnRamp
Last updated: October 27, 2026
Connect OnRamp to Azure Active Directory so your team can sign in with their existing Azure credentials — no separate OnRamp password needed. SSO is an add-on feature; contact your Customer Success Manager or email support@onramp.us to enable it before starting.
Before You Begin
You need Super Admin permissions in OnRamp and admin rights in Azure AD.
Each user must have an OnRamp account with the same email address as their Azure AD account.
Only SP-initiated login is supported — users must log in at app.onramp.us, not directly from Azure.
Step 1: Get Your OnRamp SAML Values
In OnRamp, go to Settings → SSO.
Toggle on Enforce SAML SSO.
Copy the Assertion Consumer Service URL and SAML Entity ID — you’ll need these in Azure.
Step 2: Create an Enterprise Application in Azure
In the Azure portal, go to Azure Active Directory → Enterprise Applications.
Click New Application → Create your own application.
Name it (e.g.
OnRamp SAML SSO) and select Integrate any other application (Non-gallery).Click Create.
Step 3: Configure SAML in Azure
Open the new application and click Set up single sign on → Get Started → SAML.
In Basic SAML Configuration, click Edit and enter:
Identifier (Entity ID) → paste the OnRamp Entity ID
Reply URL (ACS URL) → paste the OnRamp ACS URL
Click Save.
Step 4: Connect Azure Back to OnRamp
In Azure, scroll to SAML Signing Certificate and copy the App Federation Metadata URL.
Return to OnRamp and paste it into the SAML Metadata URL field.
Click Enable SAML SSO. You’ll see a success notification when SAML is active.
Step 5: Assign Users
Assign users to the OnRamp SSO application in Azure.
Confirm each user has an OnRamp account with the matching email address.
Tips & Troubleshooting
User can’t log in? Confirm their OnRamp email matches their Azure AD email, they’re logging in at app.onramp.us, and the SAML Metadata URL was copied correctly.
Still stuck? Email support@onramp.us with screenshots of your Azure setup.