For the complete documentation index, see llms.txt
For the complete documentation index, see llms.txt

How to Integrate Microsoft Entra ID (Azure AD) Single Sign-On with Zinc

## Register an application 1. Within **Microsoft Entra ID**, from the **Overview** section, select **+ Add** > **App Registration** ![integrating-microsoft-entra-id-formerly-azure-active-directory-1](https://storage.googleapis.com/public-fini-assets/zincwork_hc_images/integrating-microsoft-entra-id-formerly-azure-active-directory-1.png) 2. For **Name**, add your **company’s name** 3. Select the relevant **Supported account types** i.e. accounts in this organisational directory only 4. For Redirect URL the platform is **Web**. The redirect URL is https://auth.zincwork.com/login/callback 5. Click **Register** 6. Make a note of the **Application (client) ID**. You’ll need add this to Zinc later ![integrating-microsoft-entra-id-formerly-azure-active-directory-2](https://storage.googleapis.com/public-fini-assets/zincwork_hc_images/integrating-microsoft-entra-id-formerly-azure-active-directory-2.png) ## Create a client secret 1. From the console page of **App Registrations,** under **Manage** select **Certificates & Secrets** 2. Click on **New Client Secret** 3. Under Expires select **730 days (24 months)** 4. Click **Add** 5. The client secret Value and Secret ID are now visible. We only require the secret **Value**. Please **copy this** - you’ll need add this to Zinc later ## Set permissions 1. Under **Manage** select **API permissions** 2. Select **Add a Permission** and then **Microsoft Graph** 3. Select **Delegated Permissions**. In the search box that appears, add the following permissions: - **User.Read** - **Directory.Read.All** - **email** - **offline_access** - **openid** 4. All permissions should now be listed 5. Select the **Grant admin consent** option ![integrating-microsoft-entra-id-formerly-azure-active-directory-3](https://storage.googleapis.com/public-fini-assets/zincwork_hc_images/integrating-microsoft-entra-id-formerly-azure-active-directory-3.png) ## Create a test user We recommend you create a test user, so Zinc can test your connection before finalising your connection however, this is an optional step. ## Share your SSO credentials with Zinc 1. You’ll need your **Azure primary domain,** together with the **Application (client) id**, and the **Secret Value** created above 2. Sign into your Zinc account and navigate to your company admin page: https://app.zincwork.com/company/general 3. Within **Enterprise Single Sign On** click **Start now** and add your credentials ![integrating-microsoft-entra-id-formerly-azure-active-directory-4](https://storage.googleapis.com/public-fini-assets/zincwork_hc_images/integrating-microsoft-entra-id-formerly-azure-active-directory-4.png)