![SSO in Pachca with Azure OpenID](https://pachca.com/help/sso6.jpg)

# SSO in Pachca with Azure OpenID

> How to set up SSO with Azure Active Directory over OpenID Connect in the Pachca team chat app. A step-by-step guide

Источник: https://pachca.com/en/help-center/administration/sso-azure-openid

In Azure Active Directory, go to **App registrations**.

![App registrations in Azure AD](https://pachca.com/help/sso-azure-openid-1762628491569-mdpopc.png)

Click **New registration**.

Fill in the values as shown in the image. We'll give you the **Web** redirect URI during the integration. Click **Register**.

![New app registration form in Azure](https://pachca.com/help/sso-azure-openid-1762628492196-r4up5r.png)

On the app screen:

- Copy the **Application (client) ID** and the **Directory (tenant) ID** and send them to us.
- Click **Endpoints** and send us the value of the **OpenID Connect metadata document** field.

![Application and directory IDs in Azure](https://pachca.com/help/sso-azure-openid-1762628493387-2rhuy.png)

Go to **Certificates & secrets**.

Click **New client secret** and create a secret. Send us its value.

> Pachca needs user data to work, so set up Azure to pass it in the OpenID token.

Go to **Token configuration**.

Click **Add optional claim**.

Fill in the form as shown in the image.

![Setting up OpenID token claims](https://pachca.com/help/sso-azure-openid-1762628494422-0md5v.png)

> We can also agree on passing other fields to Pachca to fit your needs:

- Phone
- Job title
- Department
- [Group tags](https://pachca.com/en/help-center/administration/tags-team-members)

You can also pass any other text fields from your directory to Pachca, such as an employee's manager or birthday. **To do this, send your request to support after you start setting up the integration.**

‍

Click **Add** and select the checkbox.

![Confirming app permissions](https://pachca.com/help/sso-azure-openid-1762628498204-6yhuk.png)

> The app admin can set up their own, more granular policies for employee access to the Pachca app. This doesn't require any configuration changes on our side.

**You're all set!** Don't forget to send us the parameters listed in this guide, and we'll turn on SSO login for your company.

### Test the setup

On the [Pachca login screen](https://app.pachca.com/signin), click **With email**.

![With email button on the Pachca login screen](https://pachca.com/help/sso-azure-openid-1762628499380-2r6gc.png)

Click **Log in with SSO**.

![Log in with SSO button](https://pachca.com/help/sso-azure-openid-1762628500337-m1jw4.png)

Enter your work email from AD in the field.

![Entering your work email to log in with SSO](https://pachca.com/help/sso-azure-openid-1762628502585-k1d0ms.png)

Sign in through your company's system.

Your email is filled in automatically.

If the user is already signed in to the domain, this step is skipped.

![Signing in with Azure Active Directory](https://pachca.com/help/sso-azure-openid-1762628505309-g3xtxv.png)

Setup complete! Your users can now log in to Pachca.

Updated: February 17, 2025