Microsoft Entra ID

Set up single sign-on using Microsoft Entra ID (formerly Azure AD). The integration uses OpenID Connect (OIDC) to authenticate your team members.

Prerequisites

• An Entra ID (Azure AD) account with administrative privileges
• An Instruqt account with access to your team’s SSO settings

Step 1 – Register an application

In the Azure Portal:

1. Navigate to Microsoft Entra ID.
2. In the left menu, select App registrations.
3. Click New registration.

Step 2 – Configure the application

1. Enter an application name, for example Instruqt SSO.
2. Under Supported account types, select Accounts in this organizational directory only (Single tenant).
3. Under Redirect URI (optional), select Web from the dropdown and enter:

   https://sso.play.instruqt.com/login/callback

4. Click Register.

Step 3 – Create a client secret

1. In the left menu, select Certificates & secrets.
2. On the Client secrets tab, click New client secret.
3. Give the secret a descriptive name and select an expiration period.
4. Click Add.

Caution

Copy the client secret’s Value immediately. It is masked after you leave the page and can’t be retrieved later.

Step 4 – Retrieve the connection details

On the application’s Overview page:

1. Copy the Application (client) ID – this is the Client ID.
2. Copy the Directory (tenant) ID – this is used as the Domain.

Step 5 – Finish in Instruqt

1. In the sidebar, click Settings → SSO.
2. Select the Entra ID (Azure AD) option.
3. Enter the Domain, Client ID, and Client Secret.
4. Click Save.

Your team members can now sign in with their organizational credentials through your team’s login URL – see SSO overview.