Single Sign-On
Microsoft Entra ID
Setup Single Sign-On and enable members to login with their company account.
Microsoft Entra ID (formerly known as Azure
Active Directory) is a popular identity provider that can be used to setup
Single Sign-On for your organization in Tempest.
Go to API Permissions and grant access to Directory.Read.All and User.Read.All for your application.
Step-by-step
Below you will find detailed instructions on how to configure Microsoft Entra ID for Tempest.These instructions assume you already have a Directory in your Microsoft Entra ID account.
1
Go to the Microsoft Entra ID portal and follow Identity > Applications > Enterprise applications.
2
Click +New application.
3
Click +Create your own application.
4
Type in a relevant name, select Non-gallery application, and click Create.
5
Follow Identity > Applications > App registrations, and click All applications.
6
Click on the application you created.
7
Click Add a Redirect URI.
8
In Platform configurations click Add a platform.
9
Select Web.
10
Add the Redirect URL from Tempest and click Configure.
11
Click Certificates & secrets and click +New client secret.
12
Type in a relevant name, select desired expiration time, and click Add.
13
Copy secret Value and paste it into Tempest.
14
Copy the Client ID and Tenant ID and paste it into Tempest.
15
Additional permissions are needed to support Directory Sync functionality.