Microsoft Entra ID OIDC Setup

This guide walks you through configuring SSO with Microsoft Entra ID (formerly Azure Active Directory) as your identity provider.

Prerequisites

• Admin access to your Microsoft Entra ID tenant
• Admin access to your Stallion organization

Step 1: Register an Application in Entra ID

1. Log in to the Microsoft Entra admin center
2. Navigate to Identity → Applications → App registrations
3. Click New registration
4. Configure the registration:
   • Name: Stallion SSO
   • Supported account types: Select based on your requirements
   • Redirect URI: Select Web and enter https://api.stalliontech.io/api/v1/sso/auth/login/callback
5. Click Register
6. After registration, go to Authentication and add another redirect URI: https://api.stalliontech.io/api/v1/sso/auth/finalize/callback

Step 2: Configure Client Secret

1. In your app registration, go to Certificates & secrets
2. Click New client secret
3. Add a description and select an expiration period
4. Click Add
5. Copy the secret value immediately - it won't be shown again

Step 3: Gather OIDC Configuration

Note down the following values from your app registration:

Step 4: Configure API Permissions

1. Go to API permissions
2. Click Add a permission
3. Select Microsoft Graph → Delegated permissions
4. Add the following permissions:
   • openid
   • email
   • profile
5. Click Grant admin consent for [your organization]

Step 5: Configure SSO in Stallion Console

1. Log in to Stallion Console
2. Navigate to your Organization → SSO Settings
3. Click Configure SSO

Step 5.1: Enter Configuration

Enter the following details:

Click Next to proceed.

Step 5.2: Verify Domain

1. Copy the provided TXT record
2. Add it to your domain's DNS settings
3. Wait for DNS propagation (this may take a few minutes)
4. Click Verify to confirm domain ownership

Step 5.3: Finalize SSO

1. Click Finalize SSO
2. You will be redirected to Microsoft Entra ID to log in
3. Complete authentication with your Microsoft credentials
4. Once successful, SSO is fully configured

Troubleshooting