---
title: Configure the server for SAML authentication
product: Unity Version Control
canonical: https://docs.unity.com/en-us/unity-version-control/uvcs-on-prem/authentication/saml/configure-server
last_updated: 2026-11-03
generated_at: 2026-11-04T16:44:25.098Z
locale: en-us
---

# Configure the server for SAML authentication

> Configure SAML on your Unity Version Control On-Prem server with the web administration console or command line.

Configure your Unity Version Control (UVCS) On-Prem server to use SAML authentication. Use the details from your Microsoft Entra ID app registration.

Configuring the server is the second of three tasks to set up SAML authentication. For an overview, refer to [Introduction to SAML authentication with Microsoft Entra ID](./saml-introduction.md).

## Prerequisites

* [Configure Microsoft Entra ID for SAML authentication](./configure-entra-id.md).

## Configure the server

You can configure the server in the web administration console or in the command-line interface (CLI). Both methods save your SAML parameters in the `server.conf` file.

### Configure the server in the web administration console

SAML authentication is enabled by default. The authentication page of the web administration console displays SAML as a working mode option.

To use it:

1. Select **SAML**.
2. Enter your settings in the SAML details section.
3. Select **Save**.


**The web administration console page that you use to configure SAML authentication.:**
![SAML working mode and authentication settings in the web administration console.](/api/media?file=/unity-version-control/media/images/on-prem/plastic-auth-ui.png)

### Configure the server in the CLI

To configure the server in the CLI:

1. Open a terminal as an administrator.
2. Run the server configuration wizard for your operating system:
   * Windows: `plasticd configure`
   * Linux: `/opt/plasticscm5/server/plasticd configure`
   * macOS: `/Applications/PlasticSCMServer.app/Contents/MacOS/plasticd configure`
3. Select a language.
4. Enter your server port numbers. The wizard shows the default value in brackets. To keep the default, press **Enter**.
   * Server TCP listening port: default `8087`
   * Server SSL secured port: default `8088`
5. Select the `SAMLWorkingMode (SAML)` authentication mode.
6. Enter the following authentication data:
   * SAML Authentication: Sign-in URL (SAML-P sign-on endpoint).
   * SAML Authentication: IdP metadata (federation metadata document).
   * SAML Authentication: Application (client) ID.
   * SAML Authentication: Absolute session validity in days. The default is 14.
   * Graph API: Application registration tenant ID.
   * Graph API: Application registration client ID.
   * Graph API: Application registration client secret.
7. To skip the license token, press **Enter**.

## Next step

Next, [configure clients for SAML authentication](./configure-clients.md).

## Additional resources

* [Configure clients for SAML authentication](./configure-clients.md)
* [Access the server administration console](../../webadmin/access-webadmin)
* [Server configuration files](../../configure/server-configuration)
* [Network configuration](../../webadmin/network-config)