Documentation

{% docs-informer info %}

Feel free to contact your Customer Success Manager for any additional information.

{% docs-informer-end %}

Microsoft Entra ID Single Sign-On allows you to log in to Improvado via your Azure account and safely share access to Improvado between different Azure accounts.

How to Set up Single Sign-On via Azure

Step 1. Ensure your Azure account is active and the Whitelabel for your Improvado account is already set up.

‍Step 2. Get the required credentials from Azure platform:

Step 2.1. In the Azure Portal, go to Entra ID.

Step 2.2. Go to Enterprise applications.

Step 2.3. Click New application.

Step 2.4. Click Create your own application, enter the name of your app and select Register an application to integrate with Microsoft Entra ID (App you’re developing).

Step 2.5. Select Supported accounts types — Accounts in this organizational directory only and set Redirect URI ```https://<whitelabel-domain>/api/dts/v2/allauth/microsoft/login/callback/```.

Step 2.6. Return to All applications.

Step 2.7. Select Single sign-on.

Step 2.8. Click Go to application.

Step 2.9. Copy ```Client ID``` and ```Tenant ID```, then click Add a certificate or secret.

Step 2.10. Click New client secret.

Step 2.11. Set description and expiration date (set maximum of 24 months).

Step 2.12. Copy Client Secret from the ```Value``` column.

Step 2.13. Return to All applications and select your application.

Step 2.14. Select Manage → API permissions menu and click Add a permission.

Step 2.15. Add User.Read permission.

Step 2.16. Click Grant admin consent for your organisation.

Step 2.17. Click Yes.

Step 2.18. You should see a green checkmark as permission status.

‍Step 3. Please provide the following credentials to your Customer Success Manager via Keeper's One-Time Share feature:

• ```Azure Tenant ID```
• ```Client ID```
• ```Client Secret```

Step 4. If everything was set up correctly, you should see the new Sign In with Entra ID button on the Improvado Login page:

Step 5. During the initial sign-in via Microsoft Entra ID SSO, you’ll be asked to enter your Microsoft Email and Password.
And after that, you’ll immediately access the Improvado UI.