# Azure Active Directory (AAD) App Gallery

### Create Azure AD Enterprise Application

Visit [Azure Marketplace](https://azuremarketplace.microsoft.com/marketplace/apps/aad.it-conductor?tab=Overview) to start using IT-Conductor AAD SSO:

{% hint style="info" %}
Make sure that the Azure domain is an exact match to the e-mail domain used to register a tenant in IT-Conductor. Users with mismatched email domains will not be able to auto-provision in IT-Conductor.
{% endhint %}

In the Azure portal, navigate to **Azure Active Directory** → **Enterprise Applications > New Application.**

Search for IT-Conductor and click on the application link.

<figure><img src="/files/3oiZo0H2nHJes6EJQVw4" alt=""><figcaption><p>Figure 1: Browse Azure AD Gallery</p></figcaption></figure>

After Adding the application it will show up in the installed application list.

<figure><img src="/files/g5vsphlBlqnKnz1ig6AS" alt=""><figcaption><p>Figure 2: Enterprise Applications in Azure Portal</p></figcaption></figure>

Click on the application to finish the configuration.

<figure><img src="/files/d2Op8i1Pjpi076PNRiP1" alt=""><figcaption><p>Figure 3: IT-Conductor Overview in Azure Portal</p></figcaption></figure>

* Click on **Assign users and groups** to configure SSO application access.
* Click on **Set up single sign-on.**

<figure><img src="/files/bnj6WSfBgqD5LbqgwGQY" alt=""><figcaption><p>Figure 4: Set up SSO wil SAML</p></figcaption></figure>

Click **Federation Metadata XML Download** to export the metadata to a file

an Import the metadata into IT-Conductor to create an Identity Provider definition as described in [SSO Setup](/user-guide/setup/sso-setup.md).

Click **Test** to validate SSO Configuration.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.itconductor.com/user-guide/setup/sso-setup/azure-active-directory-app-gallery.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
