ToolJet/docs/versioned_docs/version-1.x.x/user-authentication/sso/openid/azuread.md

---
id: azuread
title: AzureAD
---

# AzureAD Single Sign-on

:::info
To construct a Well Known URL refer this link :: https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-protocols-oidc
:::

- Open your organisation page and select `app registration`
    <div style={{textAlign: 'center'}}>

    ![ToolJet - AzureAD app registration](/img/sso/azuread/azure-app-reg.png)

    </div>

- Select `new registration`
    <div style={{textAlign: 'center'}}>

    ![ToolJet - AzureAD app registration](/img/sso/azuread/select-new-reg-azure.png)

    </div>

- Open your organisation page and select app registration.

- Enter name, select supported account type and enter the redirect URL which can be copied from `Manage SSO -> Open Id -> Redirect URL, click on register`.
    <div style={{textAlign: 'center'}}>

    ![ToolJet - AzureAD app registration](/img/sso/azuread/azure-3.png)

    </div>

- Application will be registered and will be able to view the details

- Configure Application (Client) ID as `client id` in Open Id configuration page.
    <div style={{textAlign: 'center'}}>

    ![ToolJet - AzureAD app registration](/img/sso/azuread/azure-4-cred.png)

    </div>

- Click on `Add certificate or secret` next to the **Client credentials**.

- Click on `+New Client Secret`
    <div style={{textAlign: 'center'}}>

    ![ToolJet - AzureAD app registration](/img/sso/azuread/azure8.png)

    </div>

- Give a description, set the expiry, and then click on the `Add` button.
    <div style={{textAlign: 'center'}}>

    ![ToolJet - AzureAD app registration](/img/sso/azuread/azure7.png)

    </div>

- Secret will be created, copy value and add it to the `client secret` section of Open Id SSO config.

- You can brand the redirect page using the branding and properties option.
    <div style={{textAlign: 'center'}}>

    ![ToolJet - AzureAD app registration](/img/sso/azuread/azure9.png)

    </div>