Use one set of credentials to conveniently access Startly and all your Microsoft apps. Startly utilizes OpenID Connect (OIDC) and OAuth for the Microsoft integration for SSO.
Set-Up Instructions
In Microsoft Azure
- Log in to Azure
- Click on App registrations
![](https://help.startly.com/wp-content/uploads/2024/05/Azure-AppRegistrations_MoreServices.png)
If you don’t see the App registrations icon:
- Select More Services
- Scroll to the Identity section
- Select App registrations
- Click on the New Registration button
- Enter a name for the application (ex. Startly SSO)
- Select Accounts in this organizational directory only for who can use this application or access this API.
- Click on the Register button
![New Registration Form](https://help.startly.com/wp-content/uploads/2024/05/Azure-NewRegistration.png)
![Sample Application](https://help.startly.com/wp-content/uploads/2024/05/Azure-SampleApplication-1024x496.png)
- From the App Registrations page of your new app (ex. Startly SSO):
- Copy the Application (client) ID and paste it to Notepad to enter later into Startly.
- Click on the Endpoints tab
- Copy the Open ID Connect Metadata document to Notepad to enter later into Startly.
- Close the Endpoints drawer.
- Click on the Add a certificate or secret link
- Click the New client secret button
- Enter the same name of your application (ex. Startly SSO) into the Description of the secret
- Select an expiration date (we recommend two years)
- Click the Add button.
- Copy the Value of the Client Secret to Notepad to enter later into Startly.
![Sample Application Endpoints Drawer](https://help.startly.com/wp-content/uploads/2024/05/Azure-SampleApplication-Endpoints.png)
![](https://help.startly.com/wp-content/uploads/2024/05/Azure-NewClientSecret-1024x270.png)
- Click on the Add a certificate or secret link
- Click the New client secret button
- Enter the same name of your application (ex. Startly SSO) into the Description of the secret
- Select an expiration date (we recommend two years)
- Click the Add button.
- Copy the Value of the Client Secret to Notepad to enter later into Startly.
![](https://help.startly.com/wp-content/uploads/2024/05/Azure-AddClientSecretDrawer.png)
In Startly
![](https://help.startly.com/wp-content/uploads/2024/06/Startly-Settings-Integrations-Authentication-1024x225.png)
- Click on the Settings menu from the left nav.
- Select the Integrations category.
- Select the Authentications setting.
- Click the + Icon to add a new authentication
- Enter the SSO Description
- Select the Provider – OIDC
- Confirm that the Use Discovery feature is turned on.
- From Notepad, copy the Client ID into the Client ID field in Startly.
- From Notepad, copy the Client Secret into the Client Secret field in Startly.
- From Notepad, copy the OpenID Connect metadata document into the Discovery endpoint URL field in Startly.
- Confirm the URL was verified. A green checkmark should appear when verified.
- Click Save
![](https://help.startly.com/wp-content/uploads/2024/06/Startly-AddSSOProvider.png)
From Startly to Microsoft Azure
- In Startly:
- Open the Authentication Configuration you just created.
- Copy the read only Redirect URL field to Notepad to enter into Azure.
![](https://help.startly.com/wp-content/uploads/2024/06/Startly-ManageSSOProvider-RedirectURL.png)
![Platform Configuration](https://help.startly.com/wp-content/uploads/2024/05/Azure-PlatformConfigurations-AddPlatform-1024x246.png)
- In Microsoft Azure
- From the App Registration page, click Authentication from the left side menu.
- Click Add a platform
- Select Web
- In the Redirect URIs field, paste the Redirect URL copied from Startly.
- Click Configure.
![](https://help.startly.com/wp-content/uploads/2024/06/Azure-ConfigurePlatforms2.png)
![](https://help.startly.com/wp-content/uploads/2024/05/Azure-ConfigureWeb.png)