Skip to main content

Set up Microsoft SSO with Entra ID

How to configure Microsoft SSO with Entra ID — via Microsoft (OIDC), with no IdP setup required, or SSO (SAML 2.0).

Overview

Cye supports two ways to sign in with Microsoft Entra ID: Microsoft (OIDC) and SSO (SAML 2.0). Either method lets your users log in securely with their Microsoft credentials — no separate Cye platform password required. Microsoft (OIDC) requires no setup on your Entra ID tenant; you only enable it in the Cye platform. SSO (SAML 2.0) connects Cye directly to your identity provider (IdP) using SAML metadata. You can enable both at once and let your users choose, or use just one. This article covers Microsoft (OIDC) first, then the SAML setup.

Enable Microsoft (OIDC) login

  1. In the Cye platform, go to Settings > Company profile.

  2. Under Authentication method, select the Microsoft (OIDC) checkbox if it isn't already enabled.

  3. Click Save.

No Azure App Registration, Client ID, or Client Secret is required on your end — Cye's Entra ID application is already set up to accept sign-in from any organization.

If Microsoft sign-in doesn't work right after enabling it, contact Cye Support — there may be an additional step needed on our side to finish activating it for your account.

Prefer to connect Cye directly to your identity provider instead? The steps below walk you through SAML setup.

1. Access the SAML configuration settings

  1. In the Cye platform, go to Settings > Company profile.

  2. Select the SSO (SAML 2.0) checkbox to begin configuration. (Note: This is not enabled by default.)

2. Fill in the SSO fields

You'll see several fields, some pre-filled by the Cye platform and some you need to get from your IdP:

  • Cye platform entity ID
    This is pre-filled. Copy it into the corresponding field in your IdP.

  • Cye platform single sign-on URL
    Also pre-filled. Copy this into your IdP's configuration.

  • IdP entity ID
    Get this from your identity provider (e.g., Microsoft Entra ID) and paste it into the Cye platform.

  • IdP metadata URL
    This is a link to the XML metadata from your IdP. Paste it into the field provided.

3. Save your configuration

  1. Click Save.

  2. In the popup, type Save and click Continue to confirm and complete setup:

4. To disable SSO (if needed)

  1. Go back to Settings > Company profile.

  2. Deselect the SSO (SAML 2.0) checkbox.

  3. Read the informational popup — it explains what will happen.

  4. Click Close to dismiss the popup.

  5. Click Save, type Save, and then click Continue to confirm.

    • Important: This will remove SSO (SAML 2.0) as a login option for your users.

Important notes

  • Only administrators can edit or disable authentication method settings.

  • Changes won't take effect until you click Save and confirm.

  • To reset 2FA for another user, admins must enter their Cye platform password. If you don't have one (e.g., you normally log in with SSO), click Forgot your password to set or reset it.

  • If Microsoft (OIDC) or SSO (SAML 2.0) login isn't working as expected after you've enabled it, contact Cye Support.

Wrap-up / Next Steps

Once Microsoft (OIDC) or SSO (SAML 2.0) is configured with Entra ID, your users can log in easily and securely using their Microsoft credentials. If you ever need to turn a method off, the system walks you through the process step by step.

Related Articles
Did this answer your question?