# How to Configure Microsoft Entra for Gladstone SSO

HTML version: [How to Configure Microsoft Entra for Gladstone SSO](https://support.gladstonesoftware.cloud/sso/how-to-configure-microsoft-entra-for-gladstone-sso)

## Problem
You need to set up your Microsoft Entra (formerly Azure AD) tenant so it can be used for Single Sign-On (SSO) with Gladstone products. This is required for operators or consumers following enablement by your Account Manager.

## Resolution

1. **Open Microsoft Entra Admin Center**
    - Log in to your Microsoft Entra Admin Center.

2. **Navigate to Enterprise Applications**
    - From the left-hand menu, select **Identity > Applications > Enterprise Applications**.

3. **Create a New Application**
    - Select **New application**, then choose **Create your own application**.

4. **Configure Application Details**
    - Enter a name (e.g., "GladstoneGo").
    - Select **Integrate any other application** and click **Create**.

5. **Assign Users and Groups**
    - Select **Users and Groups**.
    - Assign relevant groups for staff and consumer access. At minimum, create:
        - A **Gladstone Go Staff** group for back-office users.
        - A **Gladstone Go Consumer** group for member access.

6. **Configure Single Sign-On**
    - Select **Single Sign-on**.
    - Choose **SAML** as the method.

7. **Configure Basic SAML Settings**
    - Select **Edit** and enter the following:
        - **Identifier:** `gladstonesoftware.cloud`
        - **Reply URL:** `https://samlauthentication.gladstonesoftware.cloud/api/samlauthentication/log-in-callback`

8. **Configure Group Claims**
    - Select **Edit** under **Attributes & Claims**.
    - Add a group claim using the following settings:
        - Groups assigned to the application
        - **Source Attribute:** Group ID

## Notes

- This SSO setup covers access for both Operator and Gladstone360. Permissions for the applications themselves are still configured within the Gladstone Management Console (GMC) as before.
- Prerequisites:
    - Access to Microsoft Entra Admin Center.
    - Permissions to create Enterprise Applications and groups, and assign groups within Entra.

### Related Articles

- How to configure Gladstone products for Consumer SSO
- How to configure Gladstone products for Operator SSO
- The Consumer SSO experience