> For the complete documentation index, see [llms.txt](https://docs.hockeystack.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.hockeystack.com/integrations/sso/azure-ad.md).

# Azure AD

HockeyStack integrates with Microsoft Azure Active Directory (Azure AD) to provide secure Single Sign-On (SSO) for your organization. Follow these steps to configure an Azure AD connection.

***

## Prerequisites

1. You must have access to the Azure portal with sufficient privileges to create or modify app registrations.
2. You will need your Azure AD domain name (found in Azure portal → Azure Active Directory → "Overview").

***

## 1. Register Your Application with Azure AD

1. Sign in to the Azure portal and navigate to "Azure Active Directory".
2. Select "App registrations" → "New registration".
3. Enter a descriptive name for your application.
4. Under "Supported account types," choose either: • Single tenant: If you only want users from your own Azure AD tenant to log in.\
   • Multitenant: If you want users from other organizations' directories to be able to log in.
5. Under "Redirect URI," select "Web" and enter the following:\
   • <https://hockeystack-production.us.auth0.com/login/callback>
6. Complete the app registration. Azure will generate an "Application (client) ID" for you.
7. To create a client secret, go to your app registration → "Certificates & secrets" → "New client secret." Make note of the generated value.

***

## 2. Share Required Information with HockeyStack

After you obtain the following:

• Application (client) ID\
• Client secret value\
• Azure AD domain name (e.g., mycompany.onmicrosoft.com)

Please share them with the HockeyStack team at <support@hockeystack.com>. We will handle the setup in Auth0 to finalize the Azure AD SSO integration.

***

## 3. Confirm Permissions (Optional)

If you plan to use extended attributes (like group membership) or advanced features, you may need to configure additional permissions for Microsoft Graph. Ensure you have:

* Directory.Read.All
* User.Read

Then, grant admin consent for those permissions in the Azure Portal.

***

## 4. Test the Integration

Once HockeyStack has configured your enterprise connection in Auth0, you can verify the SSO flow:

1. Go to your HockeyStack login page.
2. Click "Sign in with Microsoft Azure AD."
3. Enter your Azure AD credentials.
4. If successful, you will see your HockeyStack dashboard.

***

## Questions?

If you have any questions or need assistance with this process, please reach out to <support@hockeystack.com>.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.hockeystack.com/integrations/sso/azure-ad.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.