# SSO Login - AzureAd

{% hint style="info" %}
HINT: If you have already integrated [azure-active-directory](https://kb.rezonate.io/troubleshooting-and-support/data-processing/azure-active-directory "mention") you can use the recently created Service Principal and just add the redirect URI.
{% endhint %}

### Register your app with Azure AD

To register your app with Azure AD, you can see Microsoft's [Quickstart: Register an application with the Microsoft identity platform](https://docs.microsoft.com/en-us/azure/active-directory/develop/quickstart-register-app). 

During registration, configure the following settings:

<table><thead><tr><th width="298">Option</th><th>Setting</th></tr></thead><tbody><tr><td><strong>Supported account types</strong></td><td>Accounts in this organizational directory only (Default Directory only - Single tenant)</td></tr><tr><td><strong>Redirect URI</strong></td><td>Select a Redirect URI type of <strong>Web</strong>, and enter your callback URL: https://auth.rezon.dev/login/callback</td></tr></tbody></table>

&#x20;During this process, Microsoft generates an **Application (client) ID** for your application; you can find this on the app's **Overview** screen. Make a note of **this value.**

![](https://rezonate.zendesk.com/hc/article_attachments/11291165388701) &#x20;

### Create a client's secret

In the recently created application, select Certificates & Secrets

![](https://rezonate.zendesk.com/hc/article_attachments/11291171388189)

Create a new Client secret, set it to the preferred amount of time (1 year preferred), and copy and save the recently created value.

![](https://rezonate.zendesk.com/hc/article_attachments/11291195151133)

### Assign Required Permissions

Click on API Permissions ->  Add permission -> Microsoft Graph the following permissions (delegated):\
![](https://2355086414-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIkSba0W4HlnmPJ93gVOS%2Fuploads%2F7hSf8JiYWI9ck4ZLJZgY%2Fimage.png?alt=media\&token=70ae3b71-d04f-4ae6-8152-5f21190d19c4)

* Directory.Read.All
* User.Read.All

<figure><img src="https://2355086414-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIkSba0W4HlnmPJ93gVOS%2Fuploads%2Fk3PS4kMPqZ3mKZeJ2xNa%2Fimage.png?alt=media&#x26;token=aee347ca-d74e-490f-bd5d-c4f9c74ec446" alt=""><figcaption></figcaption></figure>

&#x20;

**Please send Rezonate back the following:**

1\. Microsoft Azure AD Domain

2\. Recently Created App Id

3\. Recently Created Secret Value

You can share this information by Opening a ticket with the title **"ADDING SSO TO MY TENANT"** in our [ticket system here](https://rezonate.atlassian.net/servicedesk/customer/portal/1)

<br>