> For the complete documentation index, see [llms.txt](https://knowledge.whiteintel.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://knowledge.whiteintel.io/integrations-and-api/microsoft-sso-configuration.md).

# Microsoft SSO Configuration

WhiteIntel supports Microsoft Entra ID (Azure AD) single sign-on (SSO), allowing your team to securely log in using their corporate Microsoft accounts instead of managing separate passwords.

### Prerequisites

Before enabling Microsoft SSO, make sure you have:

* An **active WhiteIntel Enterprise or Threat Intel plan**
* **Admin access** to your organization in WhiteIntel
* **Admin access** to your Microsoft Entra ID (Azure AD) tenant

### Step 1 — Create an App Registration in Azure

1. Sign in to the Azure Portal
2. Navigate to **Azure Active Directory > App registrations**.
3. Click **New Registration**.
4. Fill in the following:
   1. **Name**: `WhiteIntel SSO` (or any descriptive name)
   2. **Supported account types**: *Accounts in this organizational directory only*
   3. **Redirect URI**: <https://platform.whiteintel.io/login>

### Step 2 — Gather Required Information

* Log in to the **WhiteIntel Dashboard** as an organization admin.
* Go to **Organization Settings > SSO Configuration**.
* Enter the values from Azure:
  * **Tenant ID**
  * **Client ID**
  * **Client Secret** *(create one for WhiteIntel if not exists)*
* Confirm the **Redirect / Callback URL** is exactly: <https://platform.whiteintel.io/login>

### Step 3 — Configure SSO in WhiteIntel

* Log in to the **WhiteIntel Dashboard** as an organization admin.
* Go to **Organization Settings > SSO Configuration**.
* Enter the values from Azure:
  * **Tenant ID**
  * **Client ID**
  * **Client Secret**&#x20;
* Optionally, toggle **Enforce SSO only** to disable password login for all users.