> For the complete documentation index, see [llms.txt](https://kb.rezonate.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://kb.rezonate.io/troubleshooting-and-support/sso-integrations/sso-login-azuread.md).

# SSO Login - AzureAd

{% hint style="info" %}
HINT: If you have already integrated [Azure Active Directory](/troubleshooting-and-support/data-processing/azure-active-directory.md) you can use the recently created Service Principal and just add the redirect URI.
{% endhint %}

### Register your app with Azure AD

To register your app with Azure AD, you can see Microsoft's [Quickstart: Register an application with the Microsoft identity platform](https://docs.microsoft.com/en-us/azure/active-directory/develop/quickstart-register-app). 

During registration, configure the following settings:

<table><thead><tr><th width="298">Option</th><th>Setting</th></tr></thead><tbody><tr><td><strong>Supported account types</strong></td><td>Accounts in this organizational directory only (Default Directory only - Single tenant)</td></tr><tr><td><strong>Redirect URI</strong></td><td>Select a Redirect URI type of <strong>Web</strong>, and enter your callback URL: https://auth.rezon.dev/login/callback</td></tr></tbody></table>

&#x20;During this process, Microsoft generates an **Application (client) ID** for your application; you can find this on the app's **Overview** screen. Make a note of **this value.**

![](https://rezonate.zendesk.com/hc/article_attachments/11291165388701) &#x20;

### Create a client's secret

In the recently created application, select Certificates & Secrets

![](https://rezonate.zendesk.com/hc/article_attachments/11291171388189)

Create a new Client secret, set it to the preferred amount of time (1 year preferred), and copy and save the recently created value.

![](https://rezonate.zendesk.com/hc/article_attachments/11291195151133)

### Assign Required Permissions

Click on API Permissions ->  Add permission -> Microsoft Graph the following permissions (delegated):\
![](/files/viNiUkBwfh86EFkIokyG)

* Directory.Read.All
* User.Read.All

<figure><img src="/files/qO5jglW8tujnpnZqcpne" alt=""><figcaption></figcaption></figure>

&#x20;

**Please send Rezonate back the following:**

1\. Microsoft Azure AD Domain

2\. Recently Created App Id

3\. Recently Created Secret Value

You can share this information by Opening a ticket with the title **"ADDING SSO TO MY TENANT"** in our [ticket system here](https://rezonate.atlassian.net/servicedesk/customer/portal/1)

<br>