---
title: Azure AD Configuration for Multitenancy
slug: kronpam-reference-guide-3-9-0/azure-ad-configuration-for-multitenancy
docTags: 
createdAt: 2024-11-27T13:01:29.767Z
---

Azure AD SAML feature is also supported for multitenant environments.

For this, some parameters in the Kron PAM Application created on the Azure side must be edited to accommodate for tenants previously created on Kron PAM.

To use SAML on Host:

1. Go to the newly created Kron PAM Application.
2. Choose **Single Sign-on** on the left pane.
3. Choose **SAML**.
4. Click edit for **Basic SAML Configuration**.
5. Add **/host** to the values shown in the images below.

**Identifier (Entitiy ID)**:
https\://10.10.10.10/aioc-rest-web/servlet/saml/samlCheck/host

![](https://app.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/58JHzNlt2tPRkD9PizVIh_image.png "Entity ID")

**Reply URL**:
https\://10.10.10.10/aioc-rest-web/servlet/saml/samlRecipient/host

![](https://app.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/OTnAzxVmznAVloigCW-Ei_image.png "Reply URL")

**Logout Url**:
https\://10.10.10.10/aioc-rest-web/servlet/saml/samlLogout/host

![](https://app.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/xgNRsDFew8a9TvVID57g8_image.png "Logout URL")

For Tenant:

1. Go to the newly created Kron PAM Application.
2. Choose **Single Sign-on** on the left pane.
3. Choose **SAML**.
4. Click edit for **Basic SAML Configuration**.
5. Add **/tenantname** to the values shown in the images below. (shown as **tenantx** below)

![](https://app.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/JRUJsql9bDFyds2b6bMKt_image.png "Identifier")

![](https://app.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/syotYEzmuWMJovKikGxbm_image.png "Reply URL")

![](https://app.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/n0FPquHQQlwm2hBL26sVn_image.png "Logout URL")

The SAML configuration parameters on the Kron PAM side and the TomcatCorsFilter configurations under **/pam/gui/conf/web.xml** will be the same as the information under the Azure AD Configuration heading.

To enable different methods option on Multitenant environments, this parameter must be set on System Configuration Manager:

1. Open **Administration** > **System Configuration Manager > Add New System Parameter.**
2. Add** aioc.login.different.methods.enabled** as** true.**