Single Sign-On with Microsoft Entra

Manage your Project Insight users through your Microsoft Entra Active Directory when you enable the Microsoft Entra Single Sign On add-on.

Install the SSO with Microsoft Entra Add-on

NOTE: You must be a PI system administrator to perform these functions

1. Go to the Add-ons page and click the "Get More Add-ons" tab
   
   
   
   
2. Click on the SSO with Microsoft Entra card and then the [Install] button
   
   
   
   
3. After installing, click [Configure]
4. Enter in your Microsoft Entra ID (Tenant ID) and select whether you want Entra users automatically added to PI and/or if you want Microsoft Entra to be the only log-in method
   
   

Getting your Microsoft Entra Tenant ID

NOTE: You must be an Azure system administrator to perform these functions

1. Go to your Microsoft Entra admin center
2. Click on Entra ID
3. Click the "Copy to clipboard" icon to the right of the Tenant ID
4. Paste this value into the Tenant ID field in the PI SSO with Microsoft Entra add-on configuration screen
   
   

Granting Permission to Your Organization

NOTE: You must be an Azure system administrator to consent to the following permissions request

The Project Insight Microsoft Entra SSO application requires the following permissions:

1. Microsoft Graph - User.Read (Sign in a read user profile) 
2. Microsoft Graph - email (View user's email address)
3. Microsoft Graph - openid (Sign users in)
4. Microsoft Graph - profile (View user's basic profile)

After configuring the add-on with your Tenant ID as directed above, the very first person to sign into Project Insight using the Microsoft Entra SSO option should be an Microsoft Entra Domain Administrator.

A consent screen will be displayed but before clicking Accept make sure that the "Consent on behalf of your organization" option is checked so that all users will be able to use SSO when signing into Project Insight: