--- title: "Single-Sign-On Set Up" slug: "singlesignonsetup" tags: ["Azure Active Directory", "Configure Azure AD", "Configure SSO", "Convert to an SSO User", "Create an SSO User", "Microsoft Entra ID", "Set up an SSL Certificate", "Single Sign On", "SSO", "SSO Set up"] updated: 2026-01-21T02:55:26Z published: 2026-01-21T02:55:26Z --- > ## Documentation Index > Fetch the complete documentation index at: https://help.12dsynergy.com/llms.txt > Use this file to discover all available pages before exploring further. # Single-Sign-On Set Up Admin Content 5.1.4 (on request) or later Single Sign On allows a third-party provider, such as Azure Active Directory (now called Microsoft Entra ID), to authenticate your users and control who can log in to 12d Synergy. When you use Single Sign On authentication, your passwords are never sent to 12d Synergy and can be reused across multiple applications with a single source of truth. Currently, 12d Synergy only supports Azure AD (now called Microsoft Entra ID) as a third-party provider. When you choose to log in to the 12d Synergy applications with Single Sign On authentication, you need to do the following in the **12d Synergy Administration**application: 1. [Set up an SSL Certificate](https://help.12dsynergy.com/docs/certificates-1#11-how-to-set-up-a-certificate). 2. [Configure Azure AD (now called Microsoft Entra ID)](https://help.12dsynergy.com/docs/v5singlesignonsetup#11-how-to-configure-azure-ad-now-called-microsoft-entra-id). 3. [Configure SSO in 12d Synergy](https://help.12dsynergy.com/docs/v5singlesignonsetup#12-how-to-configure-sso-in-12d-synergy). > [!NOTE] > When using SSO, the third-party provider is responsible for two-factor authentication. [12d Synergy's two-factor authentication](https://help.12dsynergy.com/docs/v5twofactorauthenticationsetup) will no longer apply. ### 1.1. How to Configure Azure AD (now called Microsoft Entra ID) 1. Log in to your Azure portal and navigate to the **Azure Active Directory**. 2. Select **App registrations** from the left panel and click the **New registration**link. ![](https://cdn.document360.io/36833d89-59e3-46a5-b491-e9aa1b524a85/Images/Documentation/single-sign-onsetup-2.doc-image-55qd5a7m.jpg) The**Register an application**screen is displayed. ![](https://cdn.document360.io/36833d89-59e3-46a5-b491-e9aa1b524a85/Images/Documentation/single-sign-onsetup-2.doc-image-2lnb0l2g.png) 3. Enter a name for your application in the **Name**box. 4. Select the best-suited option for your application from the options displayed under the **Supported account types**section. 5. From the first box under **Redirect URI (optional)**section, select the **Single-page application (SPA)**option. 6. Enter your company's web address in the second box. 7. Click the **Register**button displayed towards the bottom of the page. The following page is displayed. ![](https://cdn.document360.io/36833d89-59e3-46a5-b491-e9aa1b524a85/Images/Documentation/st7.png) 8. Click the link displayed against the **Redirected URIs**field. The following page is displayed. ![](https://cdn.document360.io/36833d89-59e3-46a5-b491-e9aa1b524a85/Images/Documentation/st8.png) > [!NOTE] > If instead of the above page, the following β€˜**Authentication (Preview)**’ page is displayed, then click the **β€˜To switch to the old experience, please click here.’** content highlighted in the image below. ![](https://cdn.document360.io/36833d89-59e3-46a5-b491-e9aa1b524a85/Images/Documentation/step8new.png) You can then continue with the procedure mentioned below. 9. Click the **Add URI**link, as shown in the image above. 10. In the page that follows, in the **Single-page application, Redirect URIs**section, enter [https://MySynergyserver.MyCompany.Com/auth-callback](https://MySynergyserver.MyCompany.Com/auth-callback) in the provided box as shown below. ![](https://cdn.document360.io/36833d89-59e3-46a5-b491-e9aa1b524a85/Images/Documentation/st10(2).png) 11. Click the **Save**button. The following page is displayed. ![](https://cdn.document360.io/36833d89-59e3-46a5-b491-e9aa1b524a85/Images/Documentation/st11.png) 12. Click the **Add a platform**link, as shown in the image above. The following panel is displayed on the right side of the page. ![](https://cdn.document360.io/36833d89-59e3-46a5-b491-e9aa1b524a85/Images/Documentation/single-sign-onsetup-2.doc-image-qokreneh.png) 13. Click the **Mobile and desktop applications**box. The following panel is displayed. ![](https://cdn.document360.io/36833d89-59e3-46a5-b491-e9aa1b524a85/Images/Documentation/single-sign-onsetup-2.doc-image-fj6mt4as.png) 14. Select the checkbox that mentions **nativeclient** in its address. In the example above it is the first check box. 15. Enter "**http://localhost**" in the **Custom redirect URIs** box. > [!NOTE] > This is required for users who need to use an external browser for SSO. This applies only to users using **12d Synergy v5.1.6** or later. 16. Click the **Configure**button. The following page is again displayed. ![](https://cdn.document360.io/36833d89-59e3-46a5-b491-e9aa1b524a85/Images/Documentation/sso_no.png) 17. Scroll down on the resulting page and click **No**in the toggle button displayed against the **Enable the following mobile and desktop flows:**field. 18. Click the **Save**button. SSO for the mobile and web applications is now set. The following page is displayed. ![](https://cdn.document360.io/36833d89-59e3-46a5-b491-e9aa1b524a85/Images/Documentation/single-sign-onsetup-2.doc-image-73eg6tmu.png) 19. Click the **Overview**link in the left panel. The **Application (client) ID** and **Directory (tenant) ID** are displayed in this page. Use these details to [configure SSO in the **12d Synergy Administration**application](https://help.12dsynergy.com/docs/v5singlesignonsetup#12-how-to-configure-sso-in-12d-synergy). ### 1.2. How to Configure SSO in 12d Synergy 1. In the **12d Synergy Administration** application, select the **Users > Single Sign On > Azure AD > Basic Configuration**tab. 2. Click the ![](https://cdn.document360.io/36833d89-59e3-46a5-b491-e9aa1b524a85/Images/Documentation/single-sign-onsetup-2.doc-image-aj0fobn8.png)button. The **Create Azure AD Config** window is displayed. ![](https://cdn.document360.io/36833d89-59e3-46a5-b491-e9aa1b524a85/Images/Documentation/single-sign-onsetup-2.doc-image-bych04j2.jpg) 3. Enter a name for your Azure AD (now called Microsoft Entra ID) connection in the **Cosmetic Name**box. 4. Enter the Tenant ID and Client ID provided by your 12d Synergy Administrator ([from the above procedure](https://help.12dsynergy.com/docs/v5singlesignonsetup#11-how-to-configure-azure-ad-now-called-microsoft-entra-id)) in the **Tenant ID**and **Client ID** boxes, respectively. 5. Click the **OK** button. ![](https://cdn.document360.io/36833d89-59e3-46a5-b491-e9aa1b524a85/Images/Documentation/single-sign-onsetup-2.doc-image-hyb8oe5d.jpg) Your Azure AD (now called Microsoft Entra ID) configuration is completed successfully. You have to restart your 12d Synergy Server as suggested in the confirmation message. > [!NOTE] > If any file transfers are in progress while restarting the server, they are stopped. Also, all users connected to the 12d Synergy Server are disconnected. Hence, be cautious while restarting the server. 6. To restart the server, click the **Yes**button. The following message is displayed. ![](https://cdn.document360.io/36833d89-59e3-46a5-b491-e9aa1b524a85/Images/Documentation/single-sign-onsetup-2.doc-image-hz4kd1dq.jpg) 7. Click the **Ok**button. ![](https://cdn.document360.io/36833d89-59e3-46a5-b491-e9aa1b524a85/Images/Documentation/single-sign-onsetup-2.doc-image-t1jzw35o.jpg) Your Azure AD (now called Microsoft Entra ID) is configured in 12d Synergy and is displayed in the **Users > Single Sign On > Azure AD > Basic Configuration**tab. > [!NOTE] > 12d Synergy does NOT support Azure AD (now called Microsoft Entra ID) groups for Permission Management. ### 1.3. How to Create an SSO User You can create a user with Single Sign On authentication just the way you create a Windows or Custom authentication user. While creating a user in the **12d Synergy Administration** application > **Users** tab > **Create**tab > **Standard** tab, do the following: ![](https://cdn.document360.io/36833d89-59e3-46a5-b491-e9aa1b524a85/Images/Documentation/single-sign-onsetup-2.doc-image-3mx1thkc.png) 1. Select the **Single Sign On**option. 2. Enter your single-sign-on login email address in the **SSO Identity**box. 3. Select your SSO Provider from the **SSO Provider**list. 4. Enter the remaining details and click the **Create**button. - If you are unaware of any of these details, please check with your 12d Synergy Administrator. - For the complete procedure on creating a user, please refer to [Creating a User](https://help.12dsynergy.com/docs/v5users#11-how-to-create-a-user). ### 1.4. How to Convert to an SSO User > [!NOTE] > When converting users for the first time, ensure to test the conversion process on a non-admin user account. While editing a user in the **12d Synergy Administration** application > **Users** tab > finding a user from the **Find**tab > **Edit a User**window, do the following: 1. Select the **Single Sign On**option. ![](https://cdn.document360.io/36833d89-59e3-46a5-b491-e9aa1b524a85/Images/Documentation/single-sign-onsetup-2.doc-image-7phtoejl.png) 2. Clear the displayed details in the **SSO identity** box (if any) and enter the single-sign-on login email address. 3. Select the required SSO Provider from the **SSO Provider**list. 4. Make any other edits if needed, then click the **Save**button. - If you are unaware of any of these details, please check with your 12d Synergy Administrator. - For the complete procedure for editing a user, please refer to [Editing a User](https://help.12dsynergy.com/docs/v5users#12-how-to-edit-a-user).