Microsoft Entra ID - OIDC

This guide walks you through configuring Microsoft Entra ID as your OIDC identity provider. You’ll create an app registration, provide OIDC values in the SSO Configuration Portal, map required claims, assign access, test the connection, and enable Single Sign-On.

1. Create an Application

   Sign in to Microsoft Entra ID in the Microsoft Azure Portal. Go to App registrations and click New registration to create a new app.

   

   Set the Application name. Set Supported Account Types to Single tenant only.

   From the SSO Configuration Portal, copy the Redirect URI from Service Provider Details:

   In Entra ID, under Redirect URI section, select Web and paste the copied redirect URI, then click Register.

2. Generate client credentials

   From the application’s Overview page in Entra ID, copy Application (client) ID.

   Go to Certificates & secrets, click New client secret, and create a client secret and copy it.

   Add the Client ID and Client Secret in the SSO Configuration Portal.

3. Provide Issuer URL

   In Entra ID, navigate to application’s Overview page -> Endpoints. Copy the OpenID Connect metadata document URL:

   Paste the copied URL into the Issuer URL field in the SSO Configuration Portal and click Update.

4. Attribute Mapping

   Go to Token configuration and click Add optional claim. Select token type ID, then add these claims: email, family_name, and given_name.

   

5. Assign Users and Groups

   In Entra ID, navigate to Enterprise applications and select the recently created OIDC app.

   Then navigate to Users and groups and click Add user/group.

   Assign the required users or groups, and save the assignment.

6. Test your SSO connection

   In the SSO Configuration Portal, click Test Connection to verify your configuration.

   Note

   If the connection fails, you’ll see an error, the reason for the error, and a way to solve that error right on the screen.

7. Enable Single Sign-On

   Once the test succeeds, click Enable Connection.

   This completes the Microsoft Entra ID OIDC SSO setup for your application.