Skip to main content

Azure Entra Setup

Set up Azure Entra (Microsoft Entra ID, formerly Azure AD) as your OIDC identity provider for Cloud ex Machina.

1. Register an application​

  1. Sign in to the Microsoft Entra admin center.
  2. Open Entra ID → App registrations, then New registration.
  3. Name the application Cloud ex Machina.
  4. Under Supported account types, select Single tenant. The discovery endpoint in step 4 uses your tenant ID.

2. Set the redirect URIs​

  1. Open Organization Settings → SSO in Cloud ex Machina.
  2. Select Azure Entra as the identity provider.
  3. Copy the redirect URI that the tab shows. It is the URI of the host you are on.
  4. In Entra, open the application's Authentication tab.
  5. Add a Web platform and add both redirect URIs below.

Register a redirect URI for each host your team signs in on. For the organization acme:

https://app.cloudexmachina.io/auth/callback/azure-ad
https://acme.app.cloudexmachina.io/auth/callback/azure-ad

Replace acme with your organization ID. If the tab shows another host than app.cloudexmachina.io, use that host.

3. Create a client secret​

  1. Open the application's Certificates & secrets tab.
  2. Create a new client secret.
  3. Copy the secret value now. Entra hides it after you leave the page.

4. Collect the values​

  • Client ID — the Application (client) ID on the Overview tab.
  • Client secret — the secret value from step 3.
  • OIDC discovery endpoint — https://login.microsoftonline.com/<tenant-id>/v2.0/.well-known/openid-configuration. Use the v2.0 endpoint. Replace <tenant-id> with your Directory (tenant) ID from the Overview tab.

5. Save in Cloud ex Machina​

  1. Return to Organization Settings → SSO.
  2. Select Azure Entra as the identity provider.
  3. Paste the client ID, client secret, and OIDC discovery endpoint.
  4. Set Require SSO if your team must sign in with Entra only.
  5. Select Save SSO configuration.

On your next sign-in, enter your work email on the login page. Then select Continue with Azure Entra. The button shows the display name of your configuration.