Set up Microsoft Entra ID SSO

Create the application registration

1. In the Microsoft Entra admin center, open App registrations and create a registration for this intranet.
2. Use accounts in this organizational directory only unless the organization has an approved multi-tenant requirement.
3. Under Authentication, add a Web platform and paste the redirect URI displayed on the portal’s Single sign-on page.
4. Create a client secret with the shortest practical lifetime and record its value immediately.

Enter portal settings

1. Select Microsoft Entra ID in the portal.
2. Enter the Directory (tenant) ID and Application (client) ID from the registration overview.
3. Enter the client secret value, not the secret identifier.
4. Confirm the allowed email domains, JIT behavior, and default role.
5. Save and test the connection before activation.

Provider reference

Microsoft publishes the OIDC metadata and redirect URI requirements used during connection validation.

• Microsoft identity platform OIDC documentation ↗
• Microsoft redirect URI guidance ↗