Configure single sign-on (SSO) with Microsoft Entra ID so your team can log in to Budgetly using their Microsoft credentials.
Important: SSO is available on Enterprise plans only.
Setup overview
| Step | Where | What you do |
|---|---|---|
| 1 | Budgetly | Start SSO setup, copy Budgetly config |
| 2 | Entra ID | Create a “Budgetly SSO” enterprise application |
| 3 | Entra ID | Configure SAML with Budgetly’s Entity ID and Reply URL |
| 4 | Budgetly | Paste the App Federation Metadata URL, add email domains |
| 5 | Automatic | Budgetly verifies the connection |
Step 1 — Start SSO setup in Budgetly
- Navigate to Settings > Security > SSO.
- Click Connect SSO.
- Choose Entra ID as your identity provider.
- Copy the Budgetly config — you’ll need it for Step 3.
Step 2 — Create an application in Entra ID
- Sign in to Microsoft Entra ID.
- Go to Enterprise applications > New application.
- Select Create your own application, name it “Budgetly SSO”.
- Choose “Non-gallery” and click Create.
Step 3 — Configure SAML
- Open Single sign-on for your Budgetly SSO application.
- Select SAML as the sign-in method.
- Click Edit in Basic SAML Configuration and enter the values from Step 1:
- Identifier (Entity ID)
- Reply URL (Assertion Consumer Service URL)
- Sign-on URL:
https://budgetly.io/login
- Click Save.
- In Attributes and Claims, confirm the email claim is present (
user.mail).
Step 4 — Finalise in Budgetly
- In Entra ID, copy the App Federation Metadata URL from the SAML Certificates section.
- Switch back to Budgetly and paste it into the App Federation Metadata URL field.
- Enter the email domains to enforce for SSO login (comma-separated).
- Click Save & connect SSO.
Step 5 — Verification
Budgetly automatically verifies the connection. If it fails, check your SAML configuration and try again. If it succeeds, SSO status shows as Connected.
Common questions
Can users still log in with password + MFA after SSO is enabled?
No — if their email domain is SSO-enforced, they must use SSO. Users on non-enforced domains can still use password + MFA.
What identity providers are supported?
Currently only Microsoft Entra ID is supported.
I'm locked out due to an SSO issue. What do I do?
Contact another admin or Budgetly support. Support can temporarily disable SSO so you can log in with password + MFA.