Log in to the Azure portal.

In the search bar, enter Enterprise Applications, then navigate to it. Click on "+ New application".

Then click on "Create your own application".

Call it Teamstarter and click on Create

After the application is created, navigate to the "Single sign-on" page

Select the SAML option

Scroll to the section 4, Set up Teamstarter

Open up Teamstarter and navigate to the "Authentification" settings page, then click on "configure" on the SAML connection.

Copy the login URL, microsoft entra identifier and logout url.

Let the X509 certificate empty.

Select a default certificate. (You can upload one on the Keypair page if needed).

Click on "Create"

Once the connection is created, scroll on Azure to the step 1 and click "Edit"

Fill the "Identifier" an the "Assertion Consumer Service URL" and "Sign on URL" . You can do so by clicking on "Add identifier" and "Add reply URL", and use the value shown on the Teamstarter SAML configuration page :

Then don't forget to click on "Save"

If prompted to test it, click "No, I'll test later"

Now that the connection is created, you will be able to get the certificate and save it on Teamstarter. Scroll to the step 3, and click "download" next to the Certificate (Base64)

Open the certificate with a text editor and paste the content on the Teamstarter SAML configuration in the x509 field.

Once saved your connection will be configured on the Teamstarter side. And testable by clicking on the "Test the login" button

On Azure you will still have to configure who can access the application. If it's everyone at your organization you can do it quickly by selecting "No" for the "Assignment required". Else you will have to configure the Users and groups.