Set up Azure AD SSO in WorkEasy

  • Updated on Aug 14, 2025
  • Published on Aug 14, 2025
  • 1 minute(s) read
Prev Next

These instructions are intended for Azure/IT administrators or technical staff responsible for configuring identity and access management in their organization. The steps should be performed by someone with administrative access to both Azure Active Directory and WorkEasy Software.

  1. Ensure you have an active Azure subscription.

  2. Refer to the Microsoft tutorial to register the application in Azure Entra ID.

  3. Sign in to https://portal.azure.com/.

  4. Select Azure Active Directory on the left sidebar.

  5. Go to App registrations and click New registration.

  6. Enter a name for the registered application that reflects its purpose.

  7. Under Supported account types > Who can use this application or access this API?, select the third option Accounts in any organizational directory (Any Microsoft Entra ID tenant - Multitenant) and personal Microsoft accounts.

  8. Use the following Redirect URI: <IdentityServer BaseUrl>/federation/AzureAD.<CompanyCode>/signin

                 

    Note:

    • Although multiple Redirect URIs can be added, only the first one is used.

    • Changes may take 3–5 minutes to take effect.

  9. Go to Manage > Authentication > Implicit grant and hybrid flows, and select ID tokens.            

  10. Create a client secret at Manage > Certificates & secrets > Client secrets, then click + New client secret.      

  11. Enter a Description and select an expiration date. Copy the newly created secret and store it securely for later use.      

  12. Ensure that each user's email address matches their Azure identity. Go to Home > Overview > Properties.              

  13. Go to Overview and copy the Application (client) ID and the Directory (tenant) ID.              

  14. Send the following information to WorkEasy Software to register the application:    

    • CompanyCode: company code in WorkEasy Software

    • AD_TenantId: Directory (tenant) ID

    • AD_ClientId: Application (client) ID

    • AD_ClientSecret: IdentityServer secret value from the step above

  15. After WorkEasy Software has registered the application for SSO, perform a login test using the URL     https://accounts.workeasysoftware.com/Account/login?urltoken=<CompanyCode>

Related articles