Single Sign-On with Microsoft Azure AD allows you to access Tribe CRM using your existing Microsoft login. It is useful when you want to reduce the number of usernames and passwords and manage access centrally. You might use this setup when your organisation already works with Azure AD for identity management. By following this guide, you will know exactly which settings to configure and which details to share with Tribe so we can complete the setup.
Table of Contents
What Does Single Sign-On With Azure AD Do?
What Do You Need Before You Start?
How Do You Create An App Registration In Azure AD?
How Do You Create A Client Secret?
Which Details Do You Need To Share With Tribe?
What Does Single Sign-On With Azure AD Do?
Single Sign-On (SSO) allows users to log in once and gain access to multiple applications without signing in again. When Tribe CRM is connected to Microsoft Azure AD, users authenticate via Azure AD and are automatically logged in to Tribe. This improves security and simplifies access management across your organisation.
What Do You Need Before You Start?
Before configuring SSO, ensure you have access to the Azure AD admin centre and the rights to create app registrations. You also need to be able to share configuration details securely with Tribe so we can finalise the setup on our side.
How Do You Create An App Registration In Azure AD?
Go to the Azure Active Directory Admin Centre.
Select App Registrations.
Click + New Registration.
Enter a name for the application.
Enter the redirect URL: https://auth.tribecrm.nl/strategy/openidconnect/callback.
Click Register.
After registration, the application overview opens automatically.
Copy the Application (Client) ID.
Store this value securely, for example in a text file.
How Do You Create A Client Secret?
In the app registration overview, select Add A Certificate Or Secret.
Click + New Client Secret.
Enter a description.
Select the desired expiry period.
Click Add.
Copy the value shown under Value and store it securely.
Note: When a client secret expires, you must create a new one and share it with Tribe. Choosing a custom expiry period can help you plan renewals.
Which Details Do You Need To Share With Tribe?
To complete the configuration, Tribe needs the following information:
Application (Client) ID
Client Secret
OpenID Connect Metadata Document URL
You can find the metadata document URL by selecting Endpoints in the app registration overview.
Once you have collected these details, share them securely with us so we can create the correct SSO configuration for your environment.
Quick Summary
Single Sign-On with Microsoft Azure AD allows users to log in to Tribe CRM using their Azure credentials. You set this up by creating an app registration, generating a client secret, and collecting the required connection details. After sharing these details with Tribe, we configure SSO so users can access Tribe through Azure AD.