> For the complete documentation index, see [llms.txt](https://docs.docbits.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.docbits.com/chinese/guan-li-yu-she-zhi/settings/global-settings/integration/configuring-single-sign-on-sso/sso-configuration/azure-sso.md).

# Azure SSO

使用 Microsoft 登录 DocBits，无需单独设置密码

### 在 Azure AD 中创建 SAML SSO

按照以下步骤在 Azure AD 中添加 SAML SSO：

* 在 Azure 中，前往 \`Azure Active Directory\` 控制台

  ![](https://docbits.com/wp-content/uploads/2023/09/DocBits_Azure_1.png)
* 在左侧面板中，点击 \`Enterprise applications\`

![](https://docbits.com/wp-content/uploads/2023/09/DocBits_Azure_2.png)

* 点击 \`+ New application

<figure><img src="https://1870485400-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FlPczlNw8zzYNLfjfispX%2Fuploads%2Fgit-blob-461f7bc8ecbb8928a44d301dea645f9aca1d7fd3%2Fimage%20(311).png?alt=media" alt=""><figcaption></figcaption></figure>

* 点击 \`+ Create your own application\`

<div align="left"><figure><img src="https://1870485400-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FlPczlNw8zzYNLfjfispX%2Fuploads%2Fgit-blob-f25aed43b9bc5c769cf8750ac0898cff8db9b875%2Fimage%20(312).png?alt=media" alt=""><figcaption></figcaption></figure></div>

* 输入应用名称。其余选项保留默认设置。

<figure><img src="https://docbits.com/wp-content/uploads/2023/09/DocBits_Azure_5.png" alt=""><figcaption></figcaption></figure>

* 点击 \`Create\`

### 将用户分配到 SSO 配置

接下来，将用户或组分配到 SSO 配置。

**重要提示**：你应已在 Azure AD 中创建用户和组。如果还没有用户或组，请先创建，然后再继续。

* 在 \`Getting Started\` 下，点击 \`Assign Users and Groups\`。
* 点击 \`+ Add user\`

<figure><img src="https://docbits.com/wp-content/uploads/2023/09/DocBits_Azure_6.png" alt="" width="563"><figcaption></figcaption></figure>

* 选择要分配到此 SSO 配置的用户和组。这些用户将能够通过 SSO 在 DocBits 中进行身份验证。

<figure><img src="https://docbits.com/wp-content/uploads/2023/09/DocBits_Azure_7.png" alt=""><figcaption></figcaption></figure>

* 点击 \`Select\`
* 确认选择无误后，点击 \`Assign\`

![](https://docbits.com/wp-content/uploads/2023/09/DocBits_Azure_8.png)

<div align="left"><figure><img src="https://1870485400-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FlPczlNw8zzYNLfjfispX%2Fuploads%2Fgit-blob-ab86df4dc1d27c551b59da6a0423a2aa231e4397%2Fimage%20(313).png?alt=media" alt=""><figcaption></figcaption></figure></div>

* 前往 \`Groups\` 视图列表，找到已分配的组。

### 在 Azure 中设置 SSO

接下来，需要在 Azure 中完成单点登录设置。\\

* 在左侧面板中，点击 \`Single sign-on\`

![](https://docbits.com/wp-content/uploads/2023/09/DocBits_Azure_10.png)

* 点击 \`SAML\`

![](https://docbits.com/wp-content/uploads/2023/09/DocBits_Azure_11.png)

* 点击 \`Upload metadata file\`

![](https://docbits.com/wp-content/uploads/2023/09/DocBits_Azure_12.png)

* 上传 DocBits **metadata.xml**。你可以在 DocBits 账户的“设置”菜单中，前往 **Integration** 下的 **SSO Service Provider Settings** 找到该文件。

<figure><img src="https://docbits.com/wp-content/uploads/2023/09/DocBits_Azure_Metadata-1024x216.png" alt=""><figcaption></figcaption></figure>

* 编辑 \`Basic SAML Configuration\`

<figure><img src="https://docbits.com/wp-content/uploads/2023/09/DocBits_Azure_13.png" alt=""><figcaption></figcaption></figure>

* 检查 \`Entity ID\`、\`ACS URL\`、\`Sign on URL\` 和 \`Logout URL\` 是否已正确填入。

<figure><img src="https://docbits.com/wp-content/uploads/2023/09/DocBits_Azure_13.1.png" alt=""><figcaption></figcaption></figure>

* 下载新生成的 **Federation Metadata XML**。

<figure><img src="https://docbits.com/wp-content/uploads/2023/09/DocBits_Azure_14.png" alt=""><figcaption></figcaption></figure>

* 将 FederationMetadata.xml 上传到 DocBits 账户的 **Identity Service Provider Settings**。你可以在“设置”菜单的 **Integration** 下找到该设置。

\\

<figure><img src="https://docbits.com/wp-content/uploads/2023/09/DocBits_Azure_15-1024x204.png" alt=""><figcaption></figcaption></figure>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.docbits.com/chinese/guan-li-yu-she-zhi/settings/global-settings/integration/configuring-single-sign-on-sso/sso-configuration/azure-sso.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.