> ## Documentation Index
> Fetch the complete documentation index at: https://help.cloudtalk.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Microsoft Azure SSO Setup

> All additional values for Microsoft Azure SSO can be found through your Azure account

*Note: This guide serves as an addendum to our [SSO Setup Guide](https://help.cloudtalk.io/en/articles/5784952-how-to-use-sso.md) and is specifically for Azure SSO setup.*

> [!NOTE]
>
> **Why should you use Microsoft Azure SSO?**
>
> Implementing Azure SSO allows Microsoft Azure users to sign into CloudTalk services using a simplified set of login credentials. Safe deployment of SSO can increase enterprise security by limiting the number of login surfaces a company is required to use. Azure Portal users can implement SSO to streamline administrative tasks, control user privileges, and provide an accessible and secure way for employees to launch CloudTalk applications.

***

## Set up SSO Via Azure

In order to ensure a proper setup process, please make sure you have the following:

* **Admin** privileges for a **CloudTalk** account

* **Admin** privileges for a **Microsoft Azure** account

### Steps for CloudTalk Dashboard

1. Settings for SSO must be adjusted by an admin through the Dashboard. From the left sidebar, click **Settings > Single Sign On**. There you will be able to see available options for SSO in the form of toggle buttons.

   ![Single Sign On settings with toggles for each SSO provider](https://mintcdn.com/cloudtalk/60GToHGL127SHeYH/images/Screenshot-2026-10-16-at-14.59.32-1.png?fit=max\&auto=format\&n=60GToHGL127SHeYH\&q=85\&s=19a66c0523a008a325161b49016585e2)

2. Admins can toggle *On/Off* to enable or enforce:

   * **Google SSO**

   * **Azure SSO**

   * **[Okta SSO](https://help.cloudtalk.io/en/articles/5996603-okta-sso-setup.md)**

   * **Keycloak SSO**

   * **[Onelogin SSO](https://help.cloudtalk.io/en/articles/6028218-onelogin-sso-setup.md)**

   Click the toggle button to **`Enable Azure SSO`**.

3. Once Azure SSO has been enabled, admin will be asked to fill in the following values:

   * **Client ID**

   * **Client Secret**

   * **Discovery URL** (sometimes called a "Resource/Issuer URL")

     ```text theme={"system"}
     For Azure, the Discovery URL format will be: 
     https://login.microsoftonline.com/{tenant}/v2.0
     Where {tenant} is to be replaced with the admin user's actual tenant ID, which can be found via the Azure Portal
     ```

   * **Method** (**GET** or **POST**)

   ![Azure SSO fields: Client ID, Client Secret, Discovery URL, and Method](https://mintcdn.com/cloudtalk/60GToHGL127SHeYH/images/Screenshot-2026-10-16-at-15.02.32-1.png?fit=max\&auto=format\&n=60GToHGL127SHeYH\&q=85\&s=88da35dc13a62ad33c0c32fd0034d9ce)

4. Additionally, it will be necessary to input a "**redirect URI**" into an appropriate field on the interface of the respective identity provider—in this case, Azure. In the following steps, users will be required to login to their **Azure Portal** from a separate tab in order to obtain the above value references and to input the **redirect URI**, which is necessary for authorization to work properly.

```text theme={"system"}
For all identity providers, including Azure, the redirect URIs will be the following:
https://authsso.cloudtalk.io/oauth2/idpresponse
https://cloudtalk-prod.auth.eu-central-1.amazoncognito.com/oauth2/idpresponse
```

## Steps for Azure Portal

1. As a first step, login to your Microsoft Azure account and ensure you are starting from the *Azure Portal* hosted at `portal.azure.com`. From the landing page you will see a list of icons under the header *Azure services*. Click into the **pyramid** icon labeled **Azure Active Directory**.

   ![](https://mintcdn.com/cloudtalk/O5rJITGT3VgCy4bd/images/help-center/articles/5912324/e3e4cd34b070-azure-active-directory-highlighted.png?fit=max\&auto=format\&n=O5rJITGT3VgCy4bd\&q=85\&s=c65f4ca4b17de44f478e4f512e6d45a6)

2. From the choice of tabs listed on the left, select **App registrations**. If not already done, we will need to click **+ New Registration** to add CloudTalk as a new app registration.

   ![](https://mintcdn.com/cloudtalk/Cdyt2I6w7OABieBC/images/help-center/articles/5912324/64fd262fd819-new-app-registration.png?fit=max\&auto=format\&n=Cdyt2I6w7OABieBC\&q=85\&s=70744f63bd6bec7541599de083836270)

3. Enter a name for the application (`CloudTalk`) and select a choice for *Who can use this application or access this API*.

   ![](https://mintcdn.com/cloudtalk/O5rJITGT3VgCy4bd/images/help-center/articles/5912324/b0006570942a-register-application-name-and-type.png?fit=max\&auto=format\&n=O5rJITGT3VgCy4bd\&q=85\&s=a1d6cdc4c0d79c38fa9420c3b7ea261a)

   Enter the **Redirect URIs** for CloudTalk:

   ```text theme={"system"}
   https://authsso.cloudtalk.io/oauth2/idpresponse
   https://cloudtalk-prod.auth.eu-central-1.amazoncognito.com/oauth2/idpresponse
   ```

   ![](https://mintcdn.com/cloudtalk/O5rJITGT3VgCy4bd/images/help-center/articles/5912324/ca76302b9803-redirect-uri-filled-in.png?fit=max\&auto=format\&n=O5rJITGT3VgCy4bd\&q=85\&s=91c584d7149719a1a3cac8b30893fcbf)

   *\*Important\**: Change the dropdown list option on the left from **Public client/native** (shown) to **Web**. Click the blue button to **`Register`** CloudTalk as an application.

4. In case you need to add or change the Redirect URI after a CloudTalk application has already been registered, you can do so by clicking the blue text next to **Redirect URIs** on the **Overview** tab in **CloudTalk's registered application directory**.

   ![](https://mintcdn.com/cloudtalk/Cdyt2I6w7OABieBC/images/help-center/articles/5912324/602cfe30158b-ct-test-click-to-add-new-uri.png?fit=max\&auto=format\&n=Cdyt2I6w7OABieBC\&q=85\&s=0f00a3d89d392d33ac61f6c1b5f0e0c8)

5. Once CloudTalk has been registered and the Redirect URI has been added, we can find the other values which will be required to enter during setup on the CloudTalk Dashboard. Make sure to store these values somewhere safe, or have CloudTalk open in another tab to copy and paste them in directly.

6. The **Client ID** will refer in this case to the *Application Client ID* which is viewable within the **App Registrations** tab right next to the *Display name* for CloudTalk's registration.

   ![](https://mintcdn.com/cloudtalk/Cdyt2I6w7OABieBC/images/help-center/articles/5912324/04527569ff6c-client-id-place-1.png?fit=max\&auto=format\&n=Cdyt2I6w7OABieBC\&q=85\&s=d9e35ed526a5d7559d19a51e40e1c6ee)

   It can also be found after having clicked into **CloudTalk's registered application directory**, within the **Overview** tab.

   ![](https://mintcdn.com/cloudtalk/O5rJITGT3VgCy4bd/images/help-center/articles/5912324/d07bcbfebf04-client-id-place-2.png?fit=max\&auto=format\&n=O5rJITGT3VgCy4bd\&q=85\&s=5da96cfc39108d022fcb7caba8b899a3)

7. A new **Client Secret** will have to be created, if not already done. From the **App Registrations** tab in Azure, click into CloudTalk's registration, which should be highlighted in blue like a link. On Azure's overview page for **CloudTalk's app directory**, you can click the option to **Add a certificate or secret,** next to the **Client Credentials** descriptor.

   ![](https://mintcdn.com/cloudtalk/Cdyt2I6w7OABieBC/images/help-center/articles/5912324/605ed94fa3d0-add-cert-or-secret.png?fit=max\&auto=format\&n=Cdyt2I6w7OABieBC\&q=85\&s=1ba21afbee4a5edd1828fa61506563c4)

   Another option is to navigate to the left-side tabs, selecting **Certificates & secrets**. Both pathways redirect to the same page, where there will be displayed any existing certificates we have already generated.

   ![](https://mintcdn.com/cloudtalk/O5rJITGT3VgCy4bd/images/help-center/articles/5912324/bb1311ba0b58-new-client-secret-highlighted.png?fit=max\&auto=format\&n=O5rJITGT3VgCy4bd\&q=85\&s=22679718217cbcb419a30a9c2365a9b8)

   To generate a new client secret, make sure you are under the *Client secrets* header, and click the **`+ New Client Secret`** icon.

8. Enter a **Description** and an expiration date for the authentication code.

   ![](https://mintcdn.com/cloudtalk/O5rJITGT3VgCy4bd/images/help-center/articles/5912324/76cb94fe0868-add-client-secret-desc-expire.png?fit=max\&auto=format\&n=O5rJITGT3VgCy4bd\&q=85\&s=64e0565dc55114edc683b1cffe4b9a81)

   Click **`Add`**.

   ![](https://mintcdn.com/cloudtalk/O5rJITGT3VgCy4bd/images/help-center/articles/5912324/cb280b23a489-add-button-add-client-secret.png?fit=max\&auto=format\&n=O5rJITGT3VgCy4bd\&q=85\&s=2f188b24d13c2929df21a87d6d9dcc0c)

9. Be aware that the part of the **Client Secret** needed for copy-pasting is the code within the *Value* column, as shown below.

   ![](https://mintcdn.com/cloudtalk/O5rJITGT3VgCy4bd/images/help-center/articles/5912324/a4954ee25207-client-secret-highlighted.jpg?fit=max\&auto=format\&n=O5rJITGT3VgCy4bd\&q=85\&s=42b0ea22583f7af0cde8b4ca9bacaadd)

10. Last but not least, we need to get the **Discovery URI**, *not to be confused with the redirect URI* we used earlier. For Azure, the discovery URI should have the following format:

    ```text theme={"system"}
    https://login.microsoftonline.com/{tenant}/v2.0
    ```

    There are a few ways we can construct this URI with the correct tenant ID. The preferred method for accuracy is to use the exact format above, and replace `{tenant}` with the real tenant ID, which can be found either outside the CloudTalk app directory in the **Overview** or **Properties** tabs, or within the **CloudTalk app directory,** in the **Overview** tab.

    ![](https://mintcdn.com/cloudtalk/O5rJITGT3VgCy4bd/images/help-center/articles/5912324/754896840aff-tenant-id.png?fit=max\&auto=format\&n=O5rJITGT3VgCy4bd\&q=85\&s=06d9e7b61b32fac6d55c173d4a4afb64)

    *Default Directory view*

    ![](https://mintcdn.com/cloudtalk/O5rJITGT3VgCy4bd/images/help-center/articles/5912324/f77d78a05c5a-another-place-tennant-id.png?fit=max\&auto=format\&n=O5rJITGT3VgCy4bd\&q=85\&s=0aa90b0930a23b391f7fee27694ea2c9)

    *Within CloudTalk's Registered App Directory*

## Additional Step for CloudTalk.io

1. One last value we will be expected to enter within the **Dashboard > Settings > Single Sign On** fields for Azure is the **Method**\*.\* `POST` is the advised selection from a choice of `GET` or `POST`, though in the case of Azure, the method is usually interchangeable—if the setup with `POST` does not work, try `GET`.

![](https://mintcdn.com/cloudtalk/Cdyt2I6w7OABieBC/images/help-center/articles/5912324/5d09b69a8333-screenshot-2024-12-18-at-17-41-32.png?fit=max\&auto=format\&n=Cdyt2I6w7OABieBC\&q=85\&s=c9de382ac95e74645e301f67f9cd584f)

***

*Need help or have a question?* Just reach out through our [Support portal](https://support.cloudtalk.io/hc/en-us/requests/new?ticket_form_id=26305535257884) — we’re here for you.


## Related topics

- [Account Settings Guide](https://help.cloudtalk.io/en/articles/10550593-account-settings-guide.md)
- [How to Use SSO](https://help.cloudtalk.io/en/articles/5784952-how-to-use-sso.md)
- [Okta SSO Setup](https://help.cloudtalk.io/en/articles/5996603-okta-sso-setup.md)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.