---
schema_version: "1"
id: 2d38e22d3e2bbd72f888bcb16c4ffda9e709b59b41c33b1c95921fe0deb86870
title: Configure App Roles in Your Identity Provider
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/commerce/264-0-0/rt_cms_config_identity_provider_app_roles.md
canonical_url: https://help.salesforce.com/s/articleView?id=commerce.rt_cms_config_identity_provider_app_roles.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: f6f2f081bc0bf74888af63efaf98efc2135a02d29b0da3c4d1e5bddc0faf657c
description: Create app roles in Microsoft Entra ID and map them to Point of Sale CMS user roles. App roles grant employees access to the CMS based on their assigned role.
products:
  - Commerce
release: "264"
---
# Configure App Roles in Your Identity Provider

Create app roles in Microsoft Entra ID and map them to Point of Sale CMS user roles. App roles grant employees access to the CMS based on their assigned role.

1. Log in to the Microsoft Entra Admin Center.
2. Go to **App registration > App roles**.
3. Create a corresponding app role for each CMS user role. The app role's **Value** has to match the CMS user role label. For example, for a CMS user role of Associate, the app role’s value is also “Associate” (1).![The App roles page in the CMS, showing the CMS user role Associate.](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-commerce-retail-264-0-0-production-enus/17d647fb-8988-49fb-9add-c4f4cc79c9e4/retail/images/rt_cms_config_app_role_user.png)
    
    You can label the app role however you prefer, but using a name similar to the CMS user role makes mapping management easier. For example, use the label “Associate” for the Associate CMS user role.
4. If the app role’s Value includes special characters, you must percent-encode the characters. For example, “UI/UX Designer” becomes “UI%2FUX%20Designer.” Refer to the table to find the percent-encoded values for special characters.

 
| Character | Percent-encoding |
| --- | --- |
| ':' | %3A |
| '/' | %2F |
| '?' | %3F |
| '#' | %23 |
| '\[' | %5B |
| '\]' | %5D |
| '@' | %40 |
| '!' | %21 |
| '$' | %24 |
| '&' | %26 |
| "'" | %27 |
| '(' | %28 |
| ')' | %29 |
| '\*' | %2A |
| '+' | %2B |
| ',' | %2C |
| ';' | %3B |
| '=' | %3D |
| '%' | %25 |
| ' ' | %20 |