# How to Configure Microsoft Entra for Gladstone Single Sign-On (SSO)

HTML version: [How to Configure Microsoft Entra for Gladstone Single Sign-On (SSO)](https://support.gladstonesoftware.cloud/sso/how-to-configure-microsoft-entra-for-gladstone-single-sign-on-sso)

## Problem
You need to set up your Microsoft Entra account so that users can sign in to Gladstone products using Single Sign-On (SSO). This guide is for administrators preparing their Microsoft Entra tenant for use with Gladstone SSO, covering both Operator and Consumer access.

## Resolution

1. **Open Microsoft Entra Admin Center**
    - Log in to your Microsoft Entra Admin Center.

2. **Navigate to Enterprise Applications**
    - In the left menu, select **Identity > Applications > Enterprise Applications**.

3. **Create a New Application**
    - Select **New application**.
    - Choose **Create your own application**.

4. **Configure Application Details**
    - Enter a name for the application (for example, "GladstoneGo").
    - Select **Integrate any other application**.
    - Click **Create**.

5. **Assign Users and Groups**
    - Go to **Users and Groups** within the new application.
    - Assign relevant groups for Staff and Consumer access:
        - Create and assign a group for back-office users (e.g., “Gladstone Go Staff”).
        - Create and assign a group for member access (e.g., “Gladstone Go Consumer”).

6. **Configure Single Sign-On**
    - Select **Single Sign-on**.
    - Choose **SAML** as the sign-on method.

7. **Configure Basic SAML Settings**
    - Click **Edit** in the Basic SAML Configuration section.
    - Enter the following:
        - **Identifier:** `gladstonesoftware.cloud`
        - **Reply URL:** `https://samlauthentication.gladstonesoftware.cloud/api/samlauthentication/log-in-callback`

8. **Configure Group Claims**
    - Click **Edit** under **Attributes & Claims**.
    - Add a group claim with these settings:
        - Groups assigned to the application
        - **Source Attribute:** Group ID

## Notes

- This SSO setup enables access for both Operator and Gladstone360.  
- Permissions for the applications themselves are still managed in the Gladstone Management Console (GMC) as before.
- **Prerequisites:**  
    - Access to the Microsoft Entra Admin Center  
    - Permissions to create Enterprise Applications  
    - Permissions to create and assign groups within Entra

**Related Articles:**
- How to configure Gladstone products for Consumer SSO
- How to configure Gladstone products for Operator SSO
- The Consumer SSO experience