---
schema_version: "1"
id: bc83b1b5e859581e2fa580712fe15680a0384973091100306ee58328bd0492e4
title: Identity Provider Configuration Settings with Marketing Cloud Intelligence SSO
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/mktg/264-0-0/dato_getstarted_security_sso_settings.md
canonical_url: https://help.salesforce.com/s/articleView?id=mktg.dato_getstarted_security_sso_settings.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 5f63f7a87c735779f7e85ff0d4483582a2ad272a08acad365fc7df8711183228
description: Marketing Cloud Intelligence supports many providers. Each provider has its own requirements for setting up SSO.
products:
  - Marketing
  - Marketing Cloud Intelligence
release: "264"
---
# Identity Provider Configuration Settings with Marketing Cloud Intelligence SSO

Marketing Cloud Intelligence supports many providers. Each provider has its own requirements for setting up SSO.

Click a link to view more information about the provider:

- [MS Active Directory 3.0](https://cloud.google.com/architecture/identity/federating-gcp-with-active-directory-configuring-single-sign-on)
- [MS Active Directory 2.0](https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/what-is-single-sign-on)
- [Azure](https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/add-application-portal-setup-sso)

Use these configuration settings to connect to Marketing Cloud Intelligence:

- When configuring the Identifier ID and Reply URL, use the URL of the application that you use to log into Marketing Cloud Intelligence:
    - AWS US https://app.datorama.com
    - AWS EU https://app-eu.datorama.com
    - Azure US https://app-us2.datorama.com
    - Azure EU https://app-eu2.datorama.com
- When configuring the Sign-on URL field, enter the URL according to the Marketing Cloud Intelligence application that you use: (this is the Users Direct Login Page)
    - AWS US https://app.datorama.com/services/auth/sso/<account ID>
    - AWS EU https://app-eu.datorama.com/services/auth/sso/<account ID>
    - Azure US https://app-us2.datorama.com/services/auth/sso/<account ID>
    - Azure EU https://app-eu2.datorama.com/services/auth/sso/<account ID>

If you’re using SAML2, follow these guidelines:

- Marketing Cloud Intelligence uses SAML2 with the HTTP Redirect binding for SP to IdP and expects the HTTP Post binding for IdP to SP.
- You can find the Marketing Cloud Intelligence Customer URL (also called the Assertion Consumer Service URL / ACS) in your Intelligence account on the Single Sign-on setting page.
- The NameID must contain the user’s email address: Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"
- Your identity provider might ask if you want to sign the SAML assertion, the SAML response, or both. Marketing Cloud Intelligence requires the SAML response to be signed. You can choose signed or unsigned for the SAML assertion.