How do I configure Entra ID SS

At a glance

• Typical setup time: About 15 minutes

• Who you need: A Microsoft Entra administrator who can create app registrations

• What Hadrius reads: Each user's name and email at sign-in

Before you begin

You need access to the Microsoft Entra admin center with permission to create app registrations and grant API permissions.

Register the app

In the Microsoft Entra admin center, go to App registrations in the left navigation and create a new registration.

1. Give it a recognizable name, such as Hadrius Entra SSO.

2. Under Supported account types, select the first option, <Tenant> only - Single tenant.

3. Under Redirect URI, choose Web from the dropdown and enter https://app.hadrius.com/auth/sso.

Enable ID and access tokens

Under Authentication (Preview), open the Settings tab and check both Access tokens and ID tokens.

Create a client secret

Under Certificates & secrets, select Client secrets and create a new client secret. Give it a recognizable description. We recommend setting the expiration to the maximum value.

Add optional claims

Under Token configuration, choose Add optional claim, select the ID token type, and add:

• acct

• email

• family_name

• given_name

• preferred_username

• verified_primary_email

• verified_secondary_email

Add API permissions

Under API permissions, choose Add a permission, select Microsoft Graph, then Delegated permissions, and add:

• email

• profile

• openid

• offline_access

Add the credentials to Hadrius

On the app's Overview page, copy the Directory (tenant) ID and Application (client) ID. Paste them, along with the client secret Value from earlier, into the Tenant ID, Client ID and Client Secret fields below.