# How to use SAML for user authentication

**URL:** <https://community.bloomreach.com/t/how-to-use-saml-for-user-authentication/4570>\
**Category:** Experience Manager (PaaS/OnPrem)\
**Created:** [November 20, 2024, 10:35am UTC](https://community.bloomreach.com/t/how-to-use-saml-for-user-authentication/4570 "2024-11-20T10:35:45Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![raptor](https://yyz1.discourse-cdn.com/flex027/user_avatar/community.bloomreach.com/raptor/32/1781_2.png) [@raptor](https://community.bloomreach.com/u/raptor)\
**Post date:** [November 20, 2024, 10:35am UTC](https://community.bloomreach.com/t/how-to-use-saml-for-user-authentication/4570/1 "2024-11-20T10:35:45Z")

</div>

_Hi guys,_  
I need to change our logging authentication mechanism using _ **SAML with Microsoft Azure** _, instead of LDAP.  
If you have any idea/source-code/documentation, then please share it with me.

_Kind regards._  
_Mark_

---

<div class="post-metadata">

**Author:** ![david.bailey](https://yyz1.discourse-cdn.com/flex027/user_avatar/community.bloomreach.com/david.bailey/32/1490_2.png) [@david.bailey](https://community.bloomreach.com/u/david.bailey)\
**Post date:** [November 20, 2024, 11:07am UTC](https://community.bloomreach.com/t/how-to-use-saml-for-user-authentication/4570/2 "2024-11-20T11:07:08Z")

</div>

Hello, there is a general guide here but it is a bit outdated [Single Sign-On (SSO) - Bloomreach Experience Manager (PaaS/Self-Hosted) - The Fast and Flexible Headless CMS](https://xmdocumentation.bloomreach.com/library/concepts/security/sso/single-sign-on.html)

Here is a guide that uses Spring Security with Spring Boot, if you are running a recent version of the CMS (v14+) [SSO in CMS with Spring Security.pdf - Google Drive](https://drive.google.com/file/d/1G5OWp3VV-B2TNZsFN5FVn1DoPaQ4BLxf/view?usp=sharing)

You would need to substitute with the Azure integration of your choice. Something like this one, although it uses OAuth2 not SAML, which is preferred [Spring Cloud Azure Spring Security support - Java on Azure](https://learn.microsoft.com/en-us/azure/developer/java/spring-framework/spring-security-support?tabs=SpringCloudAzure4x)

Here is a slightly different example with OKTA and SAML [GitHub - machak/hippo-saml](https://github.com/machak/hippo-saml)

You might still need the LDAP connector if you want to import your users automatically.

---

<div class="post-metadata">

**Author:** ![raptor](https://yyz1.discourse-cdn.com/flex027/user_avatar/community.bloomreach.com/raptor/32/1781_2.png) [@raptor](https://community.bloomreach.com/u/raptor)\
**Post date:** [November 20, 2024, 11:35am UTC](https://community.bloomreach.com/t/how-to-use-saml-for-user-authentication/4570/3 "2024-11-20T11:35:06Z")

</div>

Hi David,  
thanks so much, these good start point to me.  
🙏 🙏 🙏

---

<div class="post-metadata">

**Author:** ![RSinha](https://yyz1.discourse-cdn.com/flex027/user_avatar/community.bloomreach.com/rsinha/32/1384_2.png) [@RSinha](https://community.bloomreach.com/u/RSinha)\
**Post date:** [December 19, 2024, 12:34pm UTC](https://community.bloomreach.com/t/how-to-use-saml-for-user-authentication/4570/4 "2024-12-19T12:34:32Z")

</div>

Hello Raptor,

Thank you for your valuable input.  
We are looking forward to your continuous contribution towards our vibrant Bloomreach Community.