How to set up single sign-on (SSO) with Microsoft Entra

Single sign-on with Microsoft Entra lets your team access Influ2 using their Entra credentials — streamlined login and centralized user management.

Before you start, you'll need:

• Admin access to your Azure environment and Influ2 account

• Permission to register applications in Microsoft Entra

Step 1: Create an application in Microsoft Entra

1. Open the Azure environment and navigate to Microsoft Entra ID.

2. Go to App registrations and click New registration.

3. Fill in the registration details:
   - Name: Influ2
   - Supported account type: Accounts in any organizational directory (Multitenant)
   - Redirect URI: https://v2.influ2.com/v1/api/auth/callback/entra

4. Click Register.

   

Step 2: Save your application identifiers

Once the app is created, you'll see important IDs on the app overview page. Save these and provide them to your Influ2 Customer Success Manager:

• Application (client) ID

• Directory (tenant) ID

Step 3: Generate an authentication key

1. Go to Application Registrations > [Your Influ2 App] > Manage > Certificates & secrets.

2. Click the Client secrets tab.

3. Click New client secret.

4. Provide a description (e.g., "Secret key for the Influ2 SSO application").

5. Set the expiration to 365 days.

6. Copy the following fields and share them with your Influ2 Customer Success Manager:
   - Description
   - Secret ID
   - Secret Value

Step 4: Create app roles

You can assign three roles to control what each user can do in Influ2.

1. Open the app you just created and go to App roles.

2. Click Create app role.

3. Create three roles — repeat this step for each:

For the Admin role:

• Display name: Admin

• Allowed member types: Users and Groups

• Value: Admin

• Description: Admin

For the Manager role:

• Display name: Manager

• Allowed member types: Users and Groups

• Value: Manager

• Description: Manager

For the Viewer role:

• Display name: Viewer

• Allowed member types: Users and Groups

• Value: Viewer

• Description: Viewer

4. Click Apply.

Step 5: Assign roles to users

1. Go to Enterprise Applications in your platform overview.

2. Find and select your Influ2 application.

3. Go to Manage > Users and groups.

4. Click Add user/group.

5. Select Users from the dropdown.

6. Select the user you want to add.

   

7. Assign one of the three roles (Admin, Manager, or Viewer) to the user.

8. The selected user now appears on the Users and groups page with their assigned role and privileges.

Step 6: Update the application manifest

1. Go to Azure Portal > App registrations and select your app.

2. On the left sidebar, go to Manage > Manifest.

3. Find the acceptMappedClaims field (it should have a null value by default).

4. Change the value to true.

"acceptMappedClaims": true,

5. Click Save.

Step 7: Add user role claim

1. Open your platform overview and go to Enterprise Applications.

2. Select your Influ2 application.

3. Go to Single Sign-On.

4. In the Attributes & Claims block, click Edit.

5. Click Add new claim.

6. Enter the following values:
   - name: user_role
   - source: attribute
   - source attribute: user.assignedroles

Provide information to Influ2

Once you've completed all steps, share the following with your Influ2 Customer Success Manager:

• Description (from the client secret)

• Secret ID (from the client secret)

• Secret Value (from the client secret)

• Application (client) ID

• Directory (tenant) ID

Your CSM will coordinate enabling Entra SSO with the Influ2 dev team and confirm once it's live.

What's next

Your team can now access Influ2 using their Entra credentials. Roles assigned in Entra will automatically apply when users log in.