Microsoft Entra ID, previously named Microsoft Azure Active Directory, can be configured to support single-sign on with Talented Team. Single sign-on is supported for any users who have an email address that matches the domain name you have set in your “Company Details”.
- Open the Microsoft Entra ID Admin console in your Microsoft Azure Tenant: https://entra.microsoft.com/
- From the side menu, choose Applications > App Registrations.
3. Click “+ New Registration” and set the following settings:
- Name: give the registration a name that makes sense to you, eg. “Talented Team”.
- Redirect URI:
- Platform: Web
- URL: https://talentedteam.com/oauth2/ad/verify
4. Click “Register” to save the app registration.
5. From the side menu, choose “Certificates & Secrets” and choose “+ New client secret”.
6. Fill in the Client Secret Form and click Add
7. Copy the “Value” of the Client Secret, you will need this value in a later step.
8. Return to the Overview page and take note of the Application (client) ID and the Directory (tenant) ID values.
9. Open Talented Team and go to the Settings page. In the “Authentication” tile, click Edit and fill in the following:
- Authentication provider: Azure Active Directory
- Tenant: The domain name of your tenant OR the Directory (tenant) ID from step 8.
- App ID: The Application (client) ID from step 8
- Client Secret: The client secret value from step 7.
10. Click Save.
Now, any users who enter an email address, matching the “Domain name” in your “Company Details” settings will be redirected to your Microsoft Login page. If a user does not have an email address matching the “Domain name” they will continue to use a TalentedTeam managed username/password.