Skip to main content
This guide walks you through configuring Microsoft Entra ID as the primary Identity Provider for the ngrok Dashboard. By integrating Microsoft Entra ID with ngrok, you can:
  • Restrict access to the ngrok Dashboard to only users authenticated via Microsoft Entra ID
  • Use Microsoft Entra ID’s dashboard to facilitate access to the ngrok app

​
What you’ll need

  • An ngrok account with administrative rights to modify account settings.
  • An ngrok Pay-as-you-go account with access to configure SAML SSO.

​
1. Configure Microsoft Entra ID

In the Microsoft Entra admin center, add an enterprise application for the ngrok Dashboard, then enable SAML single sign-on for it. See Microsoft’s guides to adding an enterprise application and enabling SAML single sign-on. As you configure the app:
  • Enter temporary values such as https://temporary for the Identifier (Entity ID) and the Reply URL (Assertion Consumer Service URL). You replace them with ngrok’s values in a later step.
  • Set the Unique User Identifier to user.mail. This value can vary based on your setup, but it must be an email address.
Then download the app’s Federation Metadata XML from the SAML Certificates section of its Single sign-on settings. You upload this file to ngrok in the next step. Microsoft Entra ID restricts access to the app through assignments, and new apps start with none. Assign the users and groups who should reach the ngrok Dashboard, and make sure your own account is assigned so you can test the integration.

​
2. Configure ngrok

To configure ngrok Dashboard SSO with Microsoft Entra ID:
  • Go to the ngrok Dashboard.
  • Click Settings > Account.
  • In the Single Sign-On (SSO) section, click New Identity Provider > New SAML Provider.
  • In the SAML Provider settings, provide a Description and click Upload XML.
  • Select the metadata file you downloaded and click Save.
  • After you save, the SP Metadata appears. Copy these values into the Microsoft Entra ID app’s Single sign-on settings, replacing the temporary values you entered earlier.
  • Save the changes in Microsoft Entra ID.

​
3. Test the integration

  • Navigate to the Microsoft Entra ID app’s Single sign-on settings.
  • Click Test > Test sign in.
  • Microsoft Entra ID redirects you to the ngrok Dashboard.
    • If the current user isn’t a member of the ngrok account and just-in-time (JIT) provisioning is enabled, ngrok prompts the user to join.
    • If the current user is already a member, ngrok signs them in to the ngrok Dashboard.