# Azure

Learn how to add Azure as the workspace SSO provider.

<Hint type="info">

This article refers to configuring SSO login using Azure Active Directory (now Microsoft Entra ID) and OIDC. [Learn how to use OIDC to integrate your Azure services with Buddy pipelines](/docs/integrations/azure/oidc.md).

</Hint>

Follow these steps to add Azure as the OIDC SSO provider for your workspace:

1. Open Buddy SSO settings in one browser tab and switch to <u>Open ID connect</u> → <u>Azure</u>.
2. In another tab, sign in to Azure and open **Microsoft Entra ID**.
3. Go to **App registrations** and click <u>\+New registration</u> from the top menu.
4. Enter the name of the application and paste the Callback URL from Buddy's SSO settings to **Redirect URI**:

![](/docs/account/sso/oidc/azure/azure-1.png 640x860)

5. Click <u>Register</u> and copy the Application (client) ID. You'll need to provide it later on in Buddy.

![](/docs/account/sso/oidc/azure/azure-2.png 640x331)

6. Next, switch to the application's <u>Endpoints</u> tab and copy **OpenID Connect metadata document**. This is the issuer that you need to provide in Buddy.

![](/docs/account/sso/oidc/azure/azure-3.png 640x292)

7. Close the right sidebar and click <u>Add a certificate or secret</u>.
8. Click <u>\+New client secret</u> and provide the description and expiration time in the right sidebar.

<Hint type="warning">

Once the secret expires, the integration will no longer work. Make sure to regenerate it in advance.

</Hint>

9. Click <u>Add</u> and copy the Value of the secret. This is the client secret that you need to paste in Buddy.

![](/docs/account/sso/oidc/azure/azure-4.png 640x374)

10. Switch back to Buddy and paste the copied values:

- **Issuer URL** → OpenID Connect metadata document
- **Client ID** → Application (client) ID
- **Client secret** → the value of Azure's client secret

11. Click <u>Test configuration and enable SSO on success</u>.
12. Sign in to your Azure account to save the SSO configuration. 

<Hint type="success">

Learn more about SSO implementation and configuration in Buddy:

- [Signing in & registration with SSO](/docs/basics/workspace-settings/sso/sso-overview.md#signing-in-registration-with-sso)
- [Enabling mandatory SAML SSO authentication](/docs/basics/workspace-settings/sso/mandatory-sso.md)
- [Adjusting SSO configuration / disabling SSO](/docs/basics/workspace-settings/sso/sso-overview.md#adjusting-sso-configuration-disabling-sso)

</Hint>


---
Original source: https://buddy.works/docs/basics/workspace-settings/sso/oidc/azure