Skip to main content

Configure Entra ID for SSO

This guide describes how to create a Single Sign-On (SSO) application in Microsoft Entra ID (former Azure Active Directory)

Yaroslav Zhbadinskyi avatar
Written by Yaroslav Zhbadinskyi
Updated over 6 months ago

Refer to our main SSO guide for detailed instructions on configuring SSO in Stripo

This guide will help you create a new OIDC application in Microsoft Entra ID and then use it for SSO in Stripo. Please, follow these steps:

  1. In "Microsoft Entra ID admin center", navigate to "Applications" → "Enterprise applications" and click "New application" at the top;

  2. Then select "Create your own application";

  3. In the pop-up, provide a name for the application and select "Register an application to integrate with Microsoft Entra ID (App you’re developing)"; then click "Create";

  4. On the App registration page, copy the Redirect URI from your Stripo settings and paste it into the "Redirect URI" field with the "Web" connection type;

  5. Navigate to "Enterprise applications", find your newly created application in the list, and click on it to open;


  6. In the application overview, click "Single sign-on", then select "Go to application";

  7. On the opened "Overview" page, locate the "Application (client) ID" field, copy the ID, and paste it into the "Client ID" field in Stripo;

  8. Click "Endpoints" in the top menu, find the URL called "OpenID Connect metadata document", and copy everything before .well-known. The copied URL should look similar to this:
    https://login.microsoftonline.com/2ababbab-babb-4aba-aba1-cbababababab/v2.0/

  9. Paste the copied URL into the "Issuer URL" field in Stripo;

  10. Go to "Certificates & secrets" in Entra ID and generate a new secret by clicking "New client secret";


  11. Select the expiration time for the secret and click "Add";


  12. Once the secret is generated, copy the secret value (not the secret ID) and paste it into the "Client Secret" field in Stripo;

Copy the secret value immediately, as Entra ID is showing it only once

Troubleshooting

Members email address validation

To ensure you can test the connection in Stripo, check that the " Email" field of your Entra ID account matches the email address in your Stripo account:

  1. Navigate to "All users" in Entra ID and find your account;

  2. Open your account, click "Edit properties";

  3. Go to the "Contact Information" tab, and ensure the "Email" field matches your Stripo email. If it doesn’t, update it and click "Save";


  4. If necessary, repeat this email verification process for other team members;

  5. If you’re inviting a new member to Entra ID, set them up as an External user. Enter the correct email address when creating their record; no further email editing will be required;

App assignment

By default, an Entra ID app might have the users assignment disabled which means you won't have to assign the app to specific team members. If assignments are enabled:

  1. Navigate to "Enterprise applications", find your app, and click to open it;

  2. Go to "Users and groups", click "Add user/group", and follow the steps to assign members to the app;

Wait a few minutes for the changes in Entra ID to take effect before testing the connection in Stripo;


Well done! If the test connection is successful, you can go on and complete the SSO activation in Stripo.


Thank you for taking the time to read our articles. We hope you will find this information helpful.


If you have any additional questions, please email us at support@stripo.email.

We would be glad to talk with you.

Did this answer your question?