Microsoft Entra ID Single Sign-On

Updated on

Oct 19, 2023

Microsoft Entra ID Single Sign-On allows you to log in to Improvado via your Azure account.

{% docs-informer info %}

Feel free to contact your Customer Success Manager for any additional information.

{% docs-informer-end %}

How to Set up Single Sign-On via Azure

Step 1. Ensure your Azure account is active and the Whitelabel for your Improvado account is already set up.

‍Step 2. Get the required credentials from Azure platform:

‍Step 2.1. In the Azure Portal, go to Azure Active Directory > Enterprise applications > Consent and permissions.

‍Step 2.2. Go to User consent settings. Select Allow user consent for apps from verified publishers for selected permissions. Click Save.

‍Step 2.3. Go to Permission classifications. Click Add permissions.

‍Step 2.4. Select Microsoft Graph. Add the following permissions:

Permission	Additional information
```offline_access```	Maintain access to data you have given it access to
```profile```	View users' basic profile
```openid```	Sign users in
```email```	View users' email address

Step 2.5. Go to Azure Active Directory > App Registrations > New Registration.Enter the name and click Register.

‍Step 2.6. In the Overview section of your app, copy Application (Client) ID and Tenant ID values somewhere.

‍Step 2.7. Go to API permissions > Add a permission > Microsoft Graph > Application permissions > Add ```User.Read``` permission.

‍Step 2.8. Click Grant Admin Consent for your tenant name, and then click Yes.

‍Step 2.9. Go to Certificates & secrets > Add New client secret. Make a note of the value. This is the Client Secret value that you will need in the next step.

‍Step 2.10. Tenant ID value is your organization identifier: ```https://{your-tenant-prefix}-admin.sharepoint.com```.

‍Step 3. Please provide the following credentials to your Customer Success Manager via Keeper's One-Time Share feature:

Azure Tenant ID
Client ID
Client Secret

Step 4. If everything was set up correctly, you should see the new Sign In with Entra ID button on the Improvado Login page:

Step 5. During the initial sign-in via Microsoft Entra ID SSO, you’ll be asked to enter your Microsoft Email and Password.
And after that, you’ll immediately access the Improvado UI.