--- title: SSO - Microsoft Entra Multitenant slug: v111/sso-microsoft-entra-multitenant docTags: createdAt: 2025-09-12T03:39:51.664Z --- # Overview When setting up Single Sign-on with Microsoft Entra, there is also an option to use Multitenanted SSO. This can simplify the setup of setting up multiple single sign-on tenants, however, requires a level of administration to the other tenant you want to set it up with. # Preparing Servicely 1. In Servicely, you will need to create an Identity Provider. Search for Identity provider in the menu, and select New ![](https://api.archbee.com/api/optimize/RDSPJwtKQ5B5sE-oMCN16/FAy5I_ZZ_2TkFM-Qp1XLx_bde097c0-8758-4b62-ab8b-c1aaaacd9e3f.png) 2. Select the Template Microsoft Azure Multitenant  ![](https://api.archbee.com/api/optimize/RDSPJwtKQ5B5sE-oMCN16/ouLqVOS6s7IssJpTDH4OR_f3a6cc81-45c5-4909-afc0-679e7c44ab90.png) 3. Enter a name for the provider, a unique ‘Client Identifier’ (will auto-generate), and select Create. This can be changed, but this will need to be noted, when setting up the Microsoft side. # Preparing Azure Active Directory 1. Log into the Azure Portal and Search for Enterprise applications ![](https://api.archbee.com/api/optimize/RDSPJwtKQ5B5sE-oMCN16/UnT8Gk0O-6Bu4E-ZZnHIg_2391fb53-e354-4946-996b-eb70b5248c17.png) 2. Select + New Application ![](https://api.archbee.com/api/optimize/RDSPJwtKQ5B5sE-oMCN16/MoJqx9uTHpmc7WWeXzow0_2391fb53-e354-4946-996b-eb70b5248c17.png) 3. Then + Create your own application 4. Select Non-gallery application ![](https://api.archbee.com/api/optimize/RDSPJwtKQ5B5sE-oMCN16/VsnewGFkj50QfU2Mj3L2R_9c233f3b-3749-4110-a416-b8b499036b7b.png) 5. Provide the Name for the application, and press the Create button. 6. Wait for the application to be created ![](https://api.archbee.com/api/optimize/RDSPJwtKQ5B5sE-oMCN16/yBTW1tMEzJR3QNji5vedV_a73e6ab4-f58c-4861-95fe-e0006ee23b1f.png) 7. Select Single sign-on or Set up single sign on ![](https://api.archbee.com/api/optimize/RDSPJwtKQ5B5sE-oMCN16/pkCXtUvSxJUYCizmhQhMl_937a8105-056e-4591-8782-5b5304a3241e.png) 8. Select SAML for the Single-sign-on 9. Select Edit on the ‘Basic SAML Configuration’ form. ![](https://api.archbee.com/api/optimize/RDSPJwtKQ5B5sE-oMCN16/sGeCBesrnWYICeItWbxqF_0a0c0917-883f-4e3b-a4bc-aed227e31c75.png) :::hint{type="warning"} Important: The identity provider needs to starts with a domain that has been verified by Azure. Such as: https\://servicely-ai-test.com/idp\_callback?client\_name=azure\_ad\_mutitenant ::: ![](https://api.archbee.com/api/optimize/RDSPJwtKQ5B5sE-oMCN16/jq1SYXeGdXCq-0BFb3Rl2_26d7f7fc-fc9b-4fd8-acc4-1eecaf0e59ec.png) 1. Enter the values, verify the information carefully and select Save 2. In Servicely copy the App Identifier URI in the App Entity Id field. ![](https://api.archbee.com/api/optimize/RDSPJwtKQ5B5sE-oMCN16/s4rgnfCtzb9sZopwYcAYJ_a7973681-1100-4c4d-ba77-fa151840956a.png) 3. Switch to the Application Registration matching your Enterprise application 4. Select Properties, in the header description click on the application registration link 5. In Servicely copy the Application ID (UUID) ![](https://api.archbee.com/api/optimize/RDSPJwtKQ5B5sE-oMCN16/XdGckomW2bWgHqSN3r_0W_5464f654-08dc-4240-aeb6-2b4381b52d4a.png) 6. Select the Authentication menu 7. In the Supported account types section select Accounts in any organizational directory (Any Microsoft Entra ID tenant - Multitenant) 8. Click Save ![](https://api.archbee.com/api/optimize/RDSPJwtKQ5B5sE-oMCN16/-utxJXf67PtV72LkH3HAn_b00fa22b-1cf6-4ec9-84f3-24b648dccac9.png) 9. Select the API permissions menu 10. Then click on + Add a permission ![](https://api.archbee.com/api/optimize/RDSPJwtKQ5B5sE-oMCN16/WatIK8rzWsUnnokheFSLl_d26e5bf1-8f2b-4193-8392-2c41e9d23a7a.png) 11. Select Microsoft Graph ![](https://api.archbee.com/api/optimize/RDSPJwtKQ5B5sE-oMCN16/IxuPQrRwgEfcbv99o-9S2_697ada18-f772-46a6-bbde-61290552a430.png) 12. Select Delegated Permissions 13. Search then Select User.Read ![](https://api.archbee.com/api/optimize/RDSPJwtKQ5B5sE-oMCN16/dURb9d8GnIAU2kYkiwbN9_b7b1e63c-d487-4cea-a6c6-3a2655d52973.png) 14. Click the Add Permissions button ![](https://api.archbee.com/api/optimize/RDSPJwtKQ5B5sE-oMCN16/ESvn-9OtDgH_EIqY0cwOq_9dcf8261-86fa-4580-8232-9c79446cd23a.png) # Finish Servicely configuration 1. Select Overview ![](https://api.archbee.com/api/optimize/RDSPJwtKQ5B5sE-oMCN16/7j4fN9f36SV0kYz0JuByS_08e2e7b7-44d3-4af0-b4b5-7a663ed91eaa.png) 2. Copy the Application (client) ID into the Client ID field of the Servicely Identity Provider configuration ![](https://api.archbee.com/api/optimize/RDSPJwtKQ5B5sE-oMCN16/KgG76mUd6Da1l2g80_CEU_image.png) 3. Create a new Tenant in the Tenants list and copy the Tenant Id in the Tenant Id field ![](https://api.archbee.com/api/optimize/RDSPJwtKQ5B5sE-oMCN16/Pz6k5lo9989lRTZ1GPWA2_ca89d756-3184-4d94-92fe-c6f3ee9da39d.png) 4. Then go back to Azure, copy the Directory (tenant) ID 5. Save the Servicely configuration 6. To add external tenants, add a new tenant in the Tenants list  ![](https://api.archbee.com/api/optimize/RDSPJwtKQ5B5sE-oMCN16/Ub6T2tTX-z_DcazL1Udbg_32174519-cf4f-4017-9d52-08fcfd418909.png)