---
title: Microsoft Entra ID
description: Learn how to configure Microsoft Entra ID (Azure AD) for your organisation's SSO portal.
---

import { Callout } from 'fumadocs-ui/components/callout';
import { Step, Steps } from 'fumadocs-ui/components/steps';

<Callout type="warn">SSO is only available on the Enterprise plan.</Callout>

## Overview

Microsoft Entra ID (formerly Azure Active Directory) is a popular identity provider for enterprise SSO. This guide will walk you through creating an app registration and configuring it for use with your Documenso SSO portal.

## Prerequisites

- Access to Microsoft Entra ID (Azure AD) admin center
- Access to your Documenso organisation as an administrator or manager

<Callout type="warn">Each user in your Azure AD will need an email associated with it.</Callout>

## Creating an App Registration

{/* prettier-ignore */}
<Steps>
<Step>
### Access Azure portal

- Navigate to the Azure Portal
- Sign in with your Microsoft Entra ID administrator account
- Search for "Azure Active Directory" or "Microsoft Entra ID" in the search bar
- Click on "Microsoft Entra ID" from the results

</Step>

<Step>
### Create app registration

- In the left sidebar, click on "App registrations"
- Click the "New registration" button

</Step>

<Step>
### Configure app registration

Fill in the registration form with the following details:

- **Name**: Your preferred name (e.g. `Documenso SSO Portal`)
- **Supported account types**: Choose based on your needs
- **Redirect URI (Web)**: Found in the Documenso SSO portal settings page

Click "Register" to create the app registration.

</Step>

<Step>
### Get client ID

After registration, you'll be taken to the app's overview page. The **Application (client) ID** is displayed prominently - this is your Client ID for Documenso.

</Step>

<Step>
### Create client secret

- In the left sidebar, click on "Certificates & secrets"
- Click "New client secret"
- Add a description (e.g., "Documenso SSO Secret")
- Choose an expiration period (recommended 12-24 months)
- Click "Add"

<Callout type="info">
  Copy the **Secret value**, not the **Secret ID**. You won't be able to access it again after you
  leave the page.
</Callout>

</Step>
</Steps>

## Getting Your OpenID Configuration URL

{/* prettier-ignore */}
<Steps>
<Step>
### Open Microsoft Entra ID

In the Azure portal, go to **Microsoft Entra ID**.

</Step>
<Step>
### Go to overview

Click **Overview** in the left sidebar.

</Step>
<Step>
### Open endpoints

Click **Endpoints** in the horizontal tab.

</Step>
<Step>
### Copy the URL

Copy the **OpenID Connect metadata document** value.

</Step>
</Steps>

## Configure Documenso SSO Portal

Now you have all the information needed to configure your Documenso SSO portal:

| Field             | Value                                                               |
| ----------------- | ------------------------------------------------------------------- |
| **Issuer URL**    | The "OpenID Connect metadata document" value from the previous step |
| **Client ID**     | The Application (client) ID from your app registration              |
| **Client Secret** | The secret value you copied during creation                         |

## See Also

- [Single Sign-On](/docs/users/organisations/single-sign-on) - General SSO configuration guide
- [OAuth Providers (Self-Hosting)](/docs/self-hosting/configuration/advanced/oauth-providers) - Configure OAuth for self-hosted instances
- [Security Settings](/docs/users/settings/security) - Manage account security options
