---
schema_version: "1"
id: 411409f93be27d7a5cf82e46790561a4d45f4d81975d949210fcc27af8727355
title: Identity Provider Configuration Settings with MDP SSO
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/mktg/264-0-0/mcidp_dato_getstarted_security_sso_settings.md
canonical_url: https://help.salesforce.com/s/articleView?id=mktg.mcidp_dato_getstarted_security_sso_settings.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: da98a262e37fa39804e2eee4cf3583319829b0893dc947153b34de310a4f6d98
description: Marketing Cloud Intelligence Data Pipelines supports many providers. Each provider has its own requirements for setting up SSO.
products:
  - Marketing
  - Marketing Cloud Intelligence
release: "264"
---
# Identity Provider Configuration Settings with MDP SSO

Marketing Cloud Intelligence Data Pipelines supports many providers. Each provider has its own requirements for setting up SSO.

Click a link to view more information about the provider:

- [MS Active Directory 3.0](https://cloud.google.com/architecture/identity/federating-gcp-with-active-directory-configuring-single-sign-on)
- [MS Active Directory 2.0](https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/what-is-single-sign-on)
- [Azure](https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/add-application-portal-setup-sso)

Use these configuration settings to connect to MDP:

- When configuring the Identifier ID and Reply URL (Assertion Consumer Service URL), use the MDP URL of the application that you use to log into MDP:
    - AWS US https://app.datorama.com
    - AWS EU https://app-eu.datorama.com
    - Azure US https://app-us2.datorama.com
    - Azure EU https://app-eu2.datorama.com
- When configuring the Sign-on URL field, enter the URL according to the MDP application that you use: (this is the Users Direct Login Page)
    - AWS US https://app.datorama.com/services/auth/sso/<account ID>
    - AWS EU https://app-eu.datorama.com/services/auth/sso/<account ID>
    - Azure US https://app-us2.datorama.com/services/auth/sso/<account ID>
    - Azure EU https://app-eu2.datorama.com/services/auth/sso/<account ID>

If you’re using SAML2, follow these guidelines:

- MDP uses SAML2 with the HTTP Redirect binding for SP to IdP and expects the HTTP Post binding for IdP to SP.
- You can find the MDP Customer URL (also called the Assertion Consumer Service URL / ACS) in your Datorama account on the Single Sign-on setting page.
- The NameID must contain the user’s email address: Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"
- Your identity provider might ask if you want to sign the SAML assertion, the SAML response, or both. MDP requires the SAML response to be signed. You can choose signed or unsigned for the SAML assertion.