Before you start
Before you can use Microsoft Entra ID with One Codex, you need to make sure your users have the Email property in the Entra ID profile set to the email address associated with their One Codex account. You can do this by going to:
Microsoft Entra ID > Users > Selecting a user > Properties > Edit (next to Contact Information)
And entering the user's email address in the Email field.
SSO will not work if the user's Email property does not match the email address on the account in One Codex.
Register a new App in Entra ID
Step 1: Start by going to Microsoft Entra ID, then selecting App registrations from the sidebar.
Step 2: From there, select + New Registration from the toolbar. Enter "One Codex" as the application name, and the appropriate tenant configuration for your organization.
You can leave the Redirect URI blank at this point.
Click Register to register the application.
From the Overview page for your newly registered application, note the Application (client) ID and the Directory (tenant) ID. You'll provide these to One Codex later.
Create a Client Secret
Step 3: From the Overview page, click Add a certificate or secret.
Optionally add a Description for the secret, and select an expiry period for the Expires field (longer is better).
Click Add, then copy the Value for the newly created Client Secret.
This is important - you cannot access the Value after you navigate away from the page, so if you don't copy the Client Secret at creation time you'll need to create a new secret.
Authorize a Redirect URI
Step 4: Back on the application Overview page, click Add a Redirect URI.
Click + Add a platform from the Platform Configurations section, then choose Web in the sidebar that appears.
Enter the redirect URI provided by One Codex in the text field of the Redirect URIs section. Leave the other fields blank.
If you don't know the redirect URI, contact support@onecodex.com and we will provide it to you.
Click Configure.
You're all set!
Provide the Client ID, Client Secret, and Tenant ID to One Codex and we'll complete the Single Sign-One configuration for you. Then, you'll be able to sign in to One Codex with your Microsoft Entra ID going forward.