Azure AD

HockeyStack integrates with Microsoft Azure Active Directory (Azure AD) to provide secure Single Sign-On (SSO) for your organization. Follow these steps to configure an Azure AD connection.

---

Prerequisites

1. You must have access to the Azure portal with sufficient privileges to create or modify app registrations.

2. You will need your Azure AD domain name (found in Azure portal → Azure Active Directory → "Overview").

---

1. Register Your Application with Azure AD

1. Sign in to the Azure portal and navigate to "Azure Active Directory".

2. Select "App registrations" → "New registration".

3. Enter a descriptive name for your application.

4. Under "Supported account types," choose either: • Single tenant: If you only want users from your own Azure AD tenant to log in. • Multitenant: If you want users from other organizations' directories to be able to log in.

5. Under "Redirect URI," select "Web" and enter the following: • https://hockeystack-production.us.auth0.com/login/callback

6. Complete the app registration. Azure will generate an "Application (client) ID" for you.

7. To create a client secret, go to your app registration → "Certificates & secrets" → "New client secret." Make note of the generated value.

---

2. Provide the Client ID, Client Secret, and Domain

After you obtain the following:

• Application (client) ID • Client secret value • Azure AD domain name (e.g., mycompany.onmicrosoft.com)

Please share them with the HockeyStack team. We will handle the setup in Auth0 to finalize the Azure AD SSO integration.

---

3. Confirm Permissions (Optional)

If you plan to use extended attributes (like group membership) or advanced features, you may need to configure additional permissions for Microsoft Graph. Ensure you have:

• Directory.Read.All

• User.Read

Then, grant admin consent for those permissions in the Azure Portal.

---

4. Test the Integration

Once HockeyStack has configured your enterprise connection in Auth0, you can verify the SSO flow:

1. Go to your HockeyStack login page.

2. Click "Sign in with Microsoft Azure AD."

3. Enter your Azure AD credentials.

4. If successful, you will see your HockeyStack dashboard.

---

Questions?

If you have any questions or need assistance with this process, please reach out to [e-mail].