---
title: "Set up Azure AD SSO in WorkEasy"
slug: "set-up-azure-ad-sso-in-workeasy"
description: "Configure Azure Active Directory and WorkEasy Software for identity management with our step-by-step guide for IT administrators. Secure your access today!"
updated: 2026-04-24T16:08:17Z
published: 2026-04-24T16:08:17Z
canonical: "help.workeasysoftware.com/set-up-azure-ad-sso-in-workeasy"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.workeasysoftware.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Set up Azure AD SSO in WorkEasy

These instructions are intended for **Azure/IT administrators** or technical staff responsible for configuring identity and access management in their organization. The steps should be performed by someone with administrative access to both **Azure Active Directory** and **WorkEasy Software**.

1. Ensure you have an active Azure subscription.
2. Refer to the [Microsoft tutorial to register the application in Azure Entra ID](https://learn.microsoft.com/en-us/entra/identity-platform/quickstart-register-app).
3. Sign in to [https://portal.azure.com/](https://portal.azure.com/).
4. Select **Azure Active Directory** on the left sidebar.
5. Go to **App registrations** and click **New registration**.
6. Enter a name for the registered application that reflects its purpose.
7. Under **Supported account types** > **Who can use this application or access this API?**, select the third option **Accounts in any organizational directory (Any Microsoft Entra ID tenant - Multitenant) and personal Microsoft accounts**.
8. Use the following Redirect URI: [https://accounts.workeasysoftware.com/Account/federation/AzureAD.<CompanyCode>/signin](https://accounts.workeasysoftware.com/Account/federation/AzureAD.&lt;CompanyCode&gt;/signin). ![](https://cdn.us.document360.io/88d7ebef-752e-45d9-95e1-ee13bd7279c5/Images/Documentation/image(725).png?sv=2026-02-06&spr=https&st=2026-11-01T15%3A15%3A33Z&se=2026-11-01T16%3A15%3A33Z&sr=c&sp=r&sig=TmYukvtQc1ZiOP9QKjHYGGkH%2FsUmwnvWIhQ5QKYK9BE%3D)

**Note:**
  - Although multiple Redirect URIs can be added, only the first one is used.
  - Changes may take 3–5 minutes to take effect.
9. Go to **Manage** > **Authentication** > **Implicit grant and hybrid flows**, and select **ID tokens**. ![](https://cdn.us.document360.io/88d7ebef-752e-45d9-95e1-ee13bd7279c5/Images/Documentation/image(719).png?sv=2026-02-06&spr=https&st=2026-11-01T15%3A15%3A33Z&se=2026-11-01T16%3A15%3A33Z&sr=c&sp=r&sig=TmYukvtQc1ZiOP9QKjHYGGkH%2FsUmwnvWIhQ5QKYK9BE%3D)
10. Create a client secret at **Manage** > **Certificates & secrets** > **Client secrets**, then click **+ New client secret**.![](https://cdn.us.document360.io/88d7ebef-752e-45d9-95e1-ee13bd7279c5/Images/Documentation/image(726).png?sv=2026-02-06&spr=https&st=2026-11-01T15%3A15%3A33Z&se=2026-11-01T16%3A15%3A33Z&sr=c&sp=r&sig=TmYukvtQc1ZiOP9QKjHYGGkH%2FsUmwnvWIhQ5QKYK9BE%3D)
11. Enter a **Description** and select an expiration date. Copy the newly created secret and store it securely for later use. ![](https://cdn.us.document360.io/88d7ebef-752e-45d9-95e1-ee13bd7279c5/Images/Documentation/image(727).png?sv=2026-02-06&spr=https&st=2026-11-01T15%3A15%3A33Z&se=2026-11-01T16%3A15%3A33Z&sr=c&sp=r&sig=TmYukvtQc1ZiOP9QKjHYGGkH%2FsUmwnvWIhQ5QKYK9BE%3D)
12. Ensure that each user's email address matches their Azure identity. Go to **Home** > **Overview** > **Properties**. ![](https://cdn.us.document360.io/88d7ebef-752e-45d9-95e1-ee13bd7279c5/Images/Documentation/image(728).png?sv=2026-02-06&spr=https&st=2026-11-01T15%3A15%3A33Z&se=2026-11-01T16%3A15%3A33Z&sr=c&sp=r&sig=TmYukvtQc1ZiOP9QKjHYGGkH%2FsUmwnvWIhQ5QKYK9BE%3D)
13. Go to **Overview** and copy the **Application (client) ID** and the **Directory (tenant) ID**. ![](https://cdn.us.document360.io/88d7ebef-752e-45d9-95e1-ee13bd7279c5/Images/Documentation/image(730).png?sv=2026-02-06&spr=https&st=2026-11-01T15%3A15%3A33Z&se=2026-11-01T16%3A15%3A33Z&sr=c&sp=r&sig=TmYukvtQc1ZiOP9QKjHYGGkH%2FsUmwnvWIhQ5QKYK9BE%3D)
14. Send the following information to WorkEasy Software to register the application:
  - **CompanyCode**: company code in WorkEasy Software
  - **AD_TenantId**: Directory (tenant) ID
  - **AD_ClientId**: Application (client) ID
  - **AD_ClientSecret**: IdentityServer secret value from the step above
15. After WorkEasy Software has registered the application for SSO, perform a login test using the URL [https://accounts.workeasysoftware.com/Account/login?urltoken=<CompanyCode>](https://accounts.workeasysoftware.com/Account/login?urltoken=&lt;CompanyCode&gt;)