---
title: Microsoft Entra ID
url: https://docs.vultr.com/platform/iam/single-sign-on/microsoft-entra-id
description: A guide for integrating Vultrs Single Sign-On functionality with Microsoft Entra ID to enable unified authentication credentials across services.
publish_date: 2024-11-15T18:19:40.599626Z
last_updated: 2026-05-26T20:26:33.096428Z
---

# How to Integrate Vultr Single Sign-On with Microsoft Entra ID

Single Sign-On (SSO) is a service that lets you authenticate to multiple websites and applications using one set of login credentials. SSO eliminates the need for multiple logins, hence providing a better user experience. Vultr SSO integrates well with Microsoft Entra ID, a cloud-based identity and access management service.

Follow this guide to integrate Vultr SSO with Microsoft Entra ID using the Vultr Console.

## Set up Microsoft Entra ID Integration

### Create a Microsoft Entra ID Account User

1. Log in to your [Microsoft Azure account](https://portal.azure.com).
1. Select **Microsoft Entra ID** under **Azure Services**.

    ![Azure Services](https://docs.vultr.com/public/doc-assets/collection-items/905/b6bc507f-2ff0-4776-9ce6-ab6bfec7ad97.png)

1. Click **Users** under **Manage**.

    ![Azure Users Menu](https://docs.vultr.com/public/doc-assets/collection-items/905/803f7f02-3ae8-4d24-9353-b66e5bb43a24.png)

1. Click **New user**, then select **Create new user**.

    ![Azure Users Menu](https://docs.vultr.com/public/doc-assets/collection-items/905/70533fb2-460f-4367-8ebe-f5f45a030c8f.png)

1. Enter the user details. Then, auto-generate and copy the user's password. After that, click **Review + create**.

    ![Enter Azure User's Details](https://docs.vultr.com/public/doc-assets/collection-items/905/7350f3f4-cd1c-49c5-8cfa-56cd81c19b83.png)

1. Review the user's details and click **Create**. Copy the **User principal name**. You'll use the value as an email address to set up a new Vultr SSO user.

    ![Confirm Azure Users Details](https://docs.vultr.com/public/doc-assets/collection-items/905/ce3c5d1c-fb4a-45a2-b9ee-6675890d95e6.png)

### Create a Microsoft Entra ID Application

1. Select **App registrations** under **Manage**.

    ![Azure App Registration Menu](https://docs.vultr.com/public/doc-assets/collection-items/905/580c53d4-31e2-4d8b-a99c-b206d7045c80.png)

1. Click **New registration**.

    ![Azure App Registration Menu](https://docs.vultr.com/public/doc-assets/collection-items/905/bc3309e4-5d8a-4dab-afc6-8b1ea734b520.png)

1. Name your App, for instance, `Vultr SSO`. Then, select **Web** from the drop-down menu, set the **Redirect URI** to `https://console.vultr.com/openid/`, and click **Register**.

    ![Register Azure App](https://docs.vultr.com/public/doc-assets/collection-items/905/1c3c59e9-0d73-4652-9241-f05210e2b1c2.png)

1. Navigate to **Manage** and select **API permissions** in the new App page. Then, click **Add a permission**.

    ![Azure API Permissions](https://docs.vultr.com/public/doc-assets/collection-items/905/c7162e88-74c4-438e-a866-17285565f34d.png)

1. Click **Microsoft Graph**.

    ![Azure Microsoft Graph](https://docs.vultr.com/public/doc-assets/collection-items/905/4ac502f2-0518-4ae1-8371-d5ca81c4c7a4.png)

1. Click **Delegated permissions**.

    ![Azure Delegated Permissions](https://docs.vultr.com/public/doc-assets/collection-items/905/082ec46c-3399-4db2-bd71-947cdc795947.png)

1. Search and set the following permissions in the search box.

    * **Directory**: Set `Directory.Read.All` permissions.

        ![Azure Directory Permissions](https://docs.vultr.com/public/doc-assets/collection-items/905/b7ab61c7-8719-4218-9ef8-6b09267bd369.png)

    * **Group**: Set `Group.Read.All` permissions.

        ![Azure Group Permissions](https://docs.vultr.com/public/doc-assets/collection-items/905/216decf6-b7b0-44ff-b52c-74063e480a7e.png)

    * **User**: Set `User.Read` permissions.

        ![Azure User Permissions](https://docs.vultr.com/public/doc-assets/collection-items/905/17e329f7-1158-4eaa-a5ec-3b8679738d44.png)

    * **email**: Set `email` permissions.

        ![Azure email Permissions](https://docs.vultr.com/public/doc-assets/collection-items/905/6247382b-dbeb-4403-b89e-8aaaab710098.png)

    * **offline_access**: Set `offline_access` permissions.

        ![Azure Offline Access Permissions](https://docs.vultr.com/public/doc-assets/collection-items/905/66425cb0-d795-4a9f-b5b1-da13e196cac0.png)

    * **openid**: Set `openid` permissions.

        ![Azure OpenID Permissions](https://docs.vultr.com/public/doc-assets/collection-items/905/065b73f1-2567-4f3b-bf51-fef308437abe.png)

    * **profile**: Set `profile` permissions and click **Add permissions** to save all the permissions.

        ![Azure Profile Permissions](https://docs.vultr.com/public/doc-assets/collection-items/905/8e993332-124a-494a-9dea-e308b490a46f.png)

1. Click **Grant admin consent for Default Directory**.

    ![Grant Admin Consent](https://docs.vultr.com/public/doc-assets/collection-items/905/a0662ac0-3644-4f8a-81fd-fbe6383f057e.png)

1. Navigate to **Certificates & secrets** and click **New client secret**.

    ![Azure Certificates & secrets](https://docs.vultr.com/public/doc-assets/collection-items/905/41582f35-6a2b-440d-a3d7-02489fb22db9.png)

1. Name the client secret. For instance, `Vultr SSO Secret`, set the expiration period, and click **Add**.

    ![Azure Client Secret Details](https://docs.vultr.com/public/doc-assets/collection-items/905/5d99d3d2-dd6b-4528-b22b-d1a6e0af2c03.png)

1. Copy the Azure **Client Secret** value to your clipboard because the Azure Portal won't display the value again.

    ![Azure Client Secret Value](https://docs.vultr.com/public/doc-assets/collection-items/905/4d391fb6-8692-4512-a3fb-2c66c4b58bed.png)

1. Navigate to **Overview** and copy the **Application (client) ID** and **Directory (tenant) ID**.

    ![Azure Client and Directory IDs](https://docs.vultr.com/public/doc-assets/collection-items/905/a76de959-30a1-4ce5-8b67-de7256965c49.png)

## Set up Vultr Single Sign-On

1. Navigate to **Account** and select **Users** under **OTHER**.
1. Click **Begin Setup** under **Single Sign-On**.

    ![Single Sign-on Setup](https://docs.vultr.com/public/doc-assets/collection-items/905/e43c48f7-f14e-49f5-8bfb-dd59be86d885.png)

1. Enter **Microsoft Entra ID Credentials** and specify `https://login.microsoftonline.com/directory-tenant-id` (For example, `https://login.microsoftonline.com/963-542b-48b-8e75-1a`) as the OpenID Provider URL. Then, click **Enable SSO**.

    ![Microsoft Entra ID Credentials](https://docs.vultr.com/public/doc-assets/collection-items/905/dc76d16f-8ed4-4d5a-8856-bcdd0faf7a7f.png)

1. Click **Add New User** to create a new user account.

    ![Add SSO User](https://docs.vultr.com/public/doc-assets/collection-items/905/df62e025-0f00-4544-8ade-0718fda2cea3.png)

1. Enter the user details, including the **Name** and **Email**. Then, customize the user permissions and click **Add User**.

    ![Enter the User Details](https://docs.vultr.com/public/doc-assets/collection-items/905/f5eadc9d-ad51-4f22-949b-781100314d29.png)

1. Use your Microsoft Entra ID user account to log in to Vultr through the Vultr [SSO Login page](https://console.vultr.com/sso/).