Skip to main content

Single sign-on (SSO) with Microsoft Entra ID

Learn how to set up sign-in via single sign-on with Microsoft Entra ID using OpenID Connect.

Sign in to Tacto via single sign-on with Microsoft Entra ID using the OpenID Connect protocol.

What is SSO? Signing in to several services with the same credentials; when signing in, the user is redirected to the identity provider (e.g. Entra ID) and authenticated there.

What is OpenID Connect? A protocol based on OAuth 2.0; it verifies identity and uses JSON Web Tokens (JWTs).

Setting up OIDC with Entra ID (prerequisite: rights to register apps):

  1. Create a client application in Azure Entra ID (App registrations).

  2. Name the application (e.g. "Tacto"), type Single-page application.

  3. Add the redirect URI https://auth.tacto.ai/login/callback.

  4. Enable ID tokens (Authentication → "ID tokens").

  5. API permissions (Microsoft Graph, delegated): openid, profile, email, User.Read.

  6. Add ID token claims: email, given_name, family_name.

  7. Send the Application (client) ID, Directory (tenant) ID and your company's primary email domain to Tacto.

  8. Make sure that all users in Entra ID have an email address.

  9. Add users under "Enterprise applications" → app → "Users and groups".

Did this answer your question?