Microsoft Entra ID

Learn how to configure Microsoft Entra ID (Azure AD) for your organisation's SSO portal.

SSO is only available on the Enterprise plan.

Overview

Microsoft Entra ID (formerly Azure Active Directory) is a popular identity provider for enterprise SSO. This guide will walk you through creating an app registration and configuring it for use with your Documenso SSO portal.

Prerequisites

Access to Microsoft Entra ID (Azure AD) admin center
Access to your Documenso organisation as an administrator or manager

Each user in your Azure AD will need an email associated with it.

Creating an App Registration

Access Azure portal

Navigate to the Azure Portal
Sign in with your Microsoft Entra ID administrator account
Search for "Azure Active Directory" or "Microsoft Entra ID" in the search bar
Click on "Microsoft Entra ID" from the results

Create app registration

In the left sidebar, click on "App registrations"
Click the "New registration" button

Configure app registration

Fill in the registration form with the following details:

Name: Your preferred name (e.g. Documenso SSO Portal)
Supported account types: Choose based on your needs
Redirect URI (Web): Found in the Documenso SSO portal settings page

Click "Register" to create the app registration.

Get client ID

After registration, you'll be taken to the app's overview page. The Application (client) ID is displayed prominently - this is your Client ID for Documenso.

Create client secret

In the left sidebar, click on "Certificates & secrets"
Click "New client secret"
Add a description (e.g., "Documenso SSO Secret")
Choose an expiration period (recommended 12-24 months)
Click "Add"

Copy the Secret value, not the Secret ID. You won't be able to access it again after you leave the page.

Getting Your OpenID Configuration URL

Open Microsoft Entra ID

In the Azure portal, go to Microsoft Entra ID.

Go to overview

Click Overview in the left sidebar.

Open endpoints

Click Endpoints in the horizontal tab.

Copy the URL

Copy the OpenID Connect metadata document value.

Configure Documenso SSO Portal

Now you have all the information needed to configure your Documenso SSO portal:

Field	Value
Issuer URL	The "OpenID Connect metadata document" value from the previous step
Client ID	The Application (client) ID from your app registration
Client Secret	The secret value you copied during creation