> For the complete documentation index, see [llms.txt](https://docs.empowergpt.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.empowergpt.ai/settings/system-settings/single-sign-on-sso-with-microsoft.md).

# Single Sign On (SSO) with Microsoft

EmpowerGPT supports **Single Sign-On (SSO)** using **Microsoft Entra ID**, allowing users to authenticate with their enterprise Microsoft work accounts. Enabling SSO brings the following benefits:

* Enterprise users and groups from Microsoft Entra ID become accessible inside EmpowerGPT.
* Users within the organization’s Azure directory can **self-register** as Regular Users by simply visiting the organization’s EmpowerGPT URL—no manual invite required.
* Seamless, secure login aligned with corporate identity policies.

#### **Steps to Enable SSO with Microsoft Entra ID**

{% stepper %}
{% step %}
**Register “EmpowerGPT” in Microsoft Entra ID.**

1. In another tab, sign in to [Azure Portal](https://portal.azure.com/) as an admin.
2. Navigate to "Microsoft Entra ID" (Azure Active Directory) > "App registrations" as an admin.
3. Click on "+ New registration".

<div data-with-frame="true"><figure><img src="/files/bDm2DdkZWxPNWAvK0mvN" alt=""><figcaption></figcaption></figure></div>

4. Enter “EmpowerGPT” as the name of the application and select the required supported account types. (Recommended: “Accounts in this organizational directory only”).
5. Under the “Redirect URI” section on the application registration form, select “Web” as the type and paste the Redirect URI.

<div data-with-frame="true"><figure><img src="/files/gbhHqoGHCXUdJAKNTcVl" alt=""><figcaption></figcaption></figure></div>
{% endstep %}

{% step %}
**Enter details against the registered application on Microsoft Entra ID**

1. Once the application is registered, you will be redirected to the registered application's “Overview” page.
2. Copy the “Application (client) ID” and “Directory (tenant) ID” from the “Overview” page and enter each it in the respective fields.

<div data-with-frame="true"><figure><img src="/files/xlm9KdUTDdEEn8q2S4dQ" alt=""><figcaption></figcaption></figure></div>

3. Navigate to “Certificates and secrets” under the “Manage” section on the registered application in Microsoft Entra ID.
4. Select the “Client secrets” tab and click “New client secret” button to create a new client secret. Enter “EmpowerGPT client secret” in description, set the expiry to 24 months (recommended) and click “add”.

<div data-with-frame="true"><figure><img src="/files/ELiQnyChnDoGID6ZxMSl" alt=""><figcaption></figcaption></figure></div>

5. Copy the secret "Value" and paste it in the field "Client Secret Value". Client secret values cannot be viewed except for immediately after creation. Be sure to save the secure value when created before leaving the page.
   {% endstep %}

{% step %}
**Give required permissions against used APIs to the registered app in Microsoft Entra ID**

1. Navigate to “API permissions” under the “Manage” section on the registered application in Microsoft Entra ID.
2. Click "+ Add a permission" button and select "Microsoft Graph" under Microsoft APIs.
3. Select "Application permissions" to give the following permissions and confirm by clicking "add permission" button.
   1. User.Read.All under User.
   2. Group.Read.All under Group.
   3. GroupMember.Read.All under GroupMember.
4. Repeat step 2 and select "Delegated permissions" to give the "profile" permission. Confirm by clicking "add permission" button below.
5. Make sure admin consent is provided for permissions that require it, indicated by a “Yes” in the “Admin consent required” column of the “Configured permissions” table.

<div data-with-frame="true"><figure><img src="/files/zn3Mvg0cUVfygpJbj2YA" alt=""><figcaption></figcaption></figure></div>
{% endstep %}
{% endstepper %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.empowergpt.ai/settings/system-settings/single-sign-on-sso-with-microsoft.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.