Skip to main content

Set up SSO with Microsoft Entra ID

Use Microsoft Entra ID Single Sign-On to let your team members sign in to Contrast using their existing Microsoft credentials.

Written by Karim Matrah

Prerequisites

Microsoft Entra ID Single Sign-On is available on the Enterprise plan.

You will need administrator access to your Microsoft Azure Portal to configure the integration.

Supported features

Contrast supports:

  • SSO using OpenID Connect (OIDC)

  • Just-in-time (JIT) provisioning: users are automatically created in Contrast when they sign in for the first time

Configuration steps

1. Register a new application for Contrast

To connect Contrast with Microsoft Entra ID, you’ll need to register a new application under your directory.

  1. In your Azure dashboard, go to Microsoft Entra ID > Manage > App registrations and click on New registration.
    ​

  2. Fill the registration form:

    1. Name: Contrast webinars

    2. Supported account types: Select the option that fits your organization.

    3. Redirect URI (Web):
      ​

      https://admin.getcontrast.io/sso/oidc/microsoft/confirmation

  3. After registration, go to the Overview tab to copy the Application (client) ID and Directory (tenant) ID, you'll need them later.

  4. Next, go to Certificates & secrets > Client secrets and create a new client secret named contrast-sso. Copy the secret value (it will be hidden next time you load the page, so don't refresh before you copy it).
    ​

  5. Finally, go to Brand & Properties and set Home Page URL field to this value:
    ​https://admin.getcontrast.io/sso/login

2. Configure Contrast

Next, configure your application settings in your Contrast account.

  1. Sign in to your Contrast account.

  2. Go to Settings → Integrations.

  3. Click the Microsoft Entra ID card to open the configuration modal.

  4. Enter the Tenant ID, Client ID and Client secret from the previous steps

  5. Save your configuration.

Your Microsoft Entra ID integration is now configured.

Test the integration

To verify that everything is working correctly:

  1. Go to https://admin.getcontrast.io/sso/login.

  2. Enter your work email address (make sure it is the same email address associated with your Microsoft account).

  3. Click Continue.

  4. You will be redirected to Microsoft to sign in.

  5. After successfully signing in, you will be redirected to your Contrast dashboard.

If this is the first time the user has signed in to Contrast, their account will be automatically created through just-in-time provisioning.

Did this answer your question?