Connect Azure AD for single sign-on and directory sync
Connect Microsoft Entra ID (formerly Azure AD) so Authors sign in with their existing work accounts using SSO, and so directory groups flow automatically into audiences. This removes separate passwords and keeps your subscriber lists in step with your organization's directory.
Before you begin
- Admin access to both this platform and your Microsoft Entra ID tenant (Global Administrator or an equivalent role that can register applications and grant consent).
- The tenant ID and the sign-in domain (for example
contoso.com) your Authors use. - A decision on which directory groups should map to which audiences, and whether Author accounts should be created automatically on first sign-in (just-in-time provisioning).
- Access to the integrations or security area of your account settings (confirm the exact steps in your account).
Steps
- In your account settings, open the SSO / identity provider section and choose Microsoft Entra ID as the provider.
- In the Microsoft Entra admin center, register (or select) an enterprise application for this platform. Add the sign-in and reply URLs shown on the platform's SSO setup screen.
- Copy your tenant ID, application (client) ID, and any signing certificate or secret into the matching fields in the platform settings.
- Map directory attributes and groups: point the platform at the Entra groups you want, and choose the audience each group should populate.
- Grant admin consent in Entra so the platform can read the users and groups you selected.
- Enable the connection, then run a test sign-in with a pilot account before rolling out to all Authors.
Result
Authors are redirected to Microsoft to sign in and land back in the platform authenticated by SSO. Members of the mapped directory groups appear as subscribers in the linked audiences, and the sync refreshes on the platform's normal schedule.
Related
Canonical terms: Author, Edition, Folder (Project Folder), Broadcast. See the Glossary.