Version 4.3 has been released! 🎉
Release Notes
Ctrlk
For the complete documentation index, see llms.txt. This page is also available as Markdown.
ChatGPT

Single Sign On (SSO) with Microsoft

EmpowerGPT supports Single Sign-On (SSO) using Microsoft Entra ID, allowing users to authenticate with their enterprise Microsoft work accounts. Enabling SSO brings the following benefits:

  • Enterprise users and groups from Microsoft Entra ID become accessible inside EmpowerGPT.

  • Users within the organization’s Azure directory can self-register as Regular Users by simply visiting the organization’s EmpowerGPT URL—no manual invite required.

  • Seamless, secure login aligned with corporate identity policies.

Steps to Enable SSO with Microsoft Entra ID

1

Register “EmpowerGPT” in Microsoft Entra ID.

  1. In another tab, sign in to Azure Portal as an admin.

  2. Navigate to "Microsoft Entra ID" (Azure Active Directory) > "App registrations" as an admin.

  3. Click on "+ New registration".

  1. Enter “EmpowerGPT” as the name of the application and select the required supported account types. (Recommended: “Accounts in this organizational directory only”).

  2. Under the “Redirect URI” section on the application registration form, select “Web” as the type and paste the Redirect URI.

2

Enter details against the registered application on Microsoft Entra ID

  1. Once the application is registered, you will be redirected to the registered application's “Overview” page.

  2. Copy the “Application (client) ID” and “Directory (tenant) ID” from the “Overview” page and enter each it in the respective fields.

  1. Navigate to “Certificates and secrets” under the “Manage” section on the registered application in Microsoft Entra ID.

  2. Select the “Client secrets” tab and click “New client secret” button to create a new client secret. Enter “EmpowerGPT client secret” in description, set the expiry to 24 months (recommended) and click “add”.

  1. Copy the secret "Value" and paste it in the field "Client Secret Value". Client secret values cannot be viewed except for immediately after creation. Be sure to save the secure value when created before leaving the page.

3

Give required permissions against used APIs to the registered app in Microsoft Entra ID

  1. Navigate to “API permissions” under the “Manage” section on the registered application in Microsoft Entra ID.

  2. Click "+ Add a permission" button and select "Microsoft Graph" under Microsoft APIs.

  3. Select "Application permissions" to give the following permissions and confirm by clicking "add permission" button.

    1. User.Read.All under User.

    2. Group.Read.All under Group.

    3. GroupMember.Read.All under GroupMember.

  4. Repeat step 2 and select "Delegated permissions" to give the "profile" permission. Confirm by clicking "add permission" button below.

  5. Make sure admin consent is provided for permissions that require it, indicated by a “Yes” in the “Admin consent required” column of the “Configured permissions” table.

PreviousCompany Logo BrandingNextSingle Sign On (SSO) with Google

Last updated

Was this helpful?