Set Up Azure SSO in OnRamp

Last updated: March 13, 2026

Connect OnRamp to Azure Active Directory so your team can sign in with their existing Azure credentials — no separate OnRamp password needed. SSO is an add-on feature; contact your Customer Success Manager or email support@onramp.us to enable it before starting.

Before You Begin

  • You need Owner permissions in OnRamp and admin rights in Azure AD.
  • Each user must have an OnRamp account with the same email address as their Azure AD account.
  • Only SP-initiated login is supported — users must log in at app.onramp.us, not directly from Azure.

Step 1: Get Your OnRamp SAML Values

  1. In OnRamp, go to Settings → SSO.
  2. Toggle on Enforce SAML SSO.
  3. Copy the Assertion Consumer Service URL and SAML Entity ID — you’ll need these in Azure.

Step 2: Create an Enterprise Application in Azure

  1. In the Azure portal, go to Azure Active Directory → Enterprise Applications.
  2. Click New Application → Create your own application.
  3. Name it (e.g. OnRamp SAML SSO) and select Integrate any other application (Non-gallery).
  4. Click Create.

Step 3: Configure SAML in Azure

  1. Open the new application and click Set up single sign on → Get Started → SAML.
  2. In Basic SAML Configuration, click Edit and enter:
    • Identifier (Entity ID) → paste the OnRamp Entity ID
    • Reply URL (ACS URL) → paste the OnRamp ACS URL
  3. Click Save.

Step 4: Connect Azure Back to OnRamp

  1. In Azure, scroll to SAML Signing Certificate and copy the App Federation Metadata URL.
  2. Return to OnRamp and paste it into the SAML Metadata URL field.
  3. Click Enable SAML SSO. You’ll see a success notification when SAML is active.

Step 5: Assign Users

  • Assign users to the OnRamp SSO application in Azure.
  • Confirm each user has an OnRamp account with the matching email address.

Tips & Troubleshooting

  • User can’t log in? Confirm their OnRamp email matches their Azure AD email, they’re logging in at app.onramp.us, and the SAML Metadata URL was copied correctly.
  • Still stuck? Email support@onramp.us with screenshots of your Azure setup.