Skip to main content

Setting up SSO with Microsoft Entra ID

This guide describes the steps for configuring your Microsoft Entra ID (formerly Azure AD) to enable single sign-on (SSO) in Pandektes.

Written by Rasmus Raagaard Larsen

Prerequisites

To complete the setup, you need administrator access to your organisation’s Microsoft Entra admin center.

You’ll need to use the following redirect URI during setup:

Redirect URI: https://pandektes-production.eu.auth0.com/login/callback

Configuration

Step 1: Register the application

  1. Sign in to the Microsoft Entra admin center.

  2. Go to Applications > App registrations > New registration.

  3. Fill in the application details as follows:

    • Name: Pandektes

    • Supported account types: select Accounts in this organizational directory only (Default Directory only - Single tenant).

    • Redirect URI:

      • Select platform: Web

      • Enter URI: https://pandektes-production.eu.auth0.com/login/callback

  4. Click Register.

Step 2: Generate a client secret

Once the application has been created, you need to generate a secret that allows Pandektes to authenticate.

  1. In the left-hand menu of your new application, select Certificates & secrets.

  2. Click New client secret.

  3. Add a description (e.g. “Pandektes SSO”) and choose an expiry date in line with your internal IT policies.

  4. Click Add.

  5. Important: copy the Value of your client secret straight away. You won’t be able to see it again once you leave the page.

Step 3: Restrict access (optional but recommended)

If you want to manage access via groups:

  1. Go to Enterprise applications in the Entra ID menu and find “Pandektes”.

  2. Under Properties, set Assignment required? to Yes.

  3. Under Users and groups, you can now assign the specific groups that should have access to the system.

Information we need from you

So that we can complete the integration on our side, please send us the following information:

  1. Application (client) ID: found on the Overview page of your app registration.

  2. Client secret value: the value you copied in Step 2 (not the Secret ID).

  3. Primary domain: the email domain your users use (e.g. companyname.co.uk).

Did this answer your question?