# Entra / Azure SSO Setup Guide

Providing documentation to your users on how to set up SSO with Entra is important for a smooth integration process. To make the process easier for your customers we provide a configuration specific to Entra, allowing you to skip collecting the OIDC URLs and instead just collect a **Tenant ID**.

## Code Examples

### Node

```javascript
const result = await client.sso.management.createOidcClient({
  redirectUrl: "https://app.example.com/authorization-code/callback",
  customerId: "your_customer_id",
  idpInfoFromCustomer: {
    idpType: "MicrosoftEntra",
    tenantId: "b17958...",
    clientId: "5c891426-22...",
    clientSecret: "aNb8Q~-v2R...",
    usesPkce: true,
  },
});
```

### Python

```python
from propelauth_byo.generated.idp_info_from_customer import IdpInfoFromCustomerMicrosoftEntra

result = await client.sso.management.create_oidc_client(
    redirect_url="https://app.example.com/authorization-code/callback",
    customer_id="your_customer_id",
    idp_info_from_customer=IdpInfoFromCustomerMicrosoftEntra(
        tenant_id="b17958...",
        client_id="5c891426-22...",
        client_secret="aNb8Q~-v2R...",
        uses_pkce=True,
    ),
)
```

### Go

```go
result, err := client.Sso.Management.CreateOIDCClient(ctx, byo.CreateOidcClientCommand{
    RedirectURL: "https://app.example.com/authorization-code/callback",
    CustomerID:  "your_customer_id",
    IdpInfoFromCustomer: &byo.IdpInfoFromCustomerMicrosoftEntra{
        TenantID:     "b17958...",
        ClientID:     "5c891426-22...",
        ClientSecret: "aNb8Q~-v2R...",
        UsesPkce:     true,
    },
})
if err != nil {
    log.Fatal("Failed to create OIDC client:", err)
}
fmt.Println(result.ClientID)
```

### .NET

```csharp
CreateOidcClientResponse result = client.sso.management.createOidcClient(
    CreateOidcClientCommand.builder()
        .redirectUrl("https://app.example.com/authorization-code/callback")
        .customerId("your_customer_id")
        .idpInfoFromCustomer(
            IdpInfoFromCustomer.MicrosoftEntra.builder()
                .tenantId("b17958...")
                .clientId("5c891426-22...")
                .clientSecret("aNb8Q~-v2R...")
                .usesPkce(true)
                .build()
        )
        .build()
);
```

### C#

```csharp
var result = await client.Sso.Management.CreateOidcClientAsync(new CreateOidcClientCommand
{
    RedirectUrl = "https://app.example.com/authorization-code/callback",
    CustomerId = "your_customer_id",
    IdpInfoFromCustomer = new IdpInfoFromCustomerMicrosoftEntra
    {
        TenantId = "b17958...",
        ClientId = "5c891426-22...",
        ClientSecret = "aNb8Q~-v2R...",
        UsesPkce = true
    }
});
```

## Example Guide for Collecting Tenant ID
1. Begin by logging into your Entra admin console and navigating to the “App Registrations” section.

2. Name the application and select **Accounts in this organizational directory only** as the supported account type.

3. In the **Redirect URI** section, select **Web** and enter the redirect URI for your app (e.g., `https://myapp.com/callback`). See [here](https://docs.byo.propelauth.com/sso/overview#callback-url-configuration) for more details on the callback URL that you should provide to your users.

4. On the next page, copy and paste the **Application (client) ID** and **Directory (tenant) ID** into `{your application}`.

5. Next, click on **Manage** in the sidebar followed by **Certificates & secrets**.

6. Click **New client secret**.

7. Add a description and set an expiration period for the Client Secret, then click **Add**. Note that you will need to generate a new Client Secret when this one expires.

8. Copy the **Value** of the Client Secret and paste it into `{your application}` as the **Client Secret**.

9. Click **Save** in `{your application}`.