--- title: Set up Microsoft Entra (Azure) Single Sign-On (SSO) description: Configure and test your Microsoft Entra (Azure) SSO integration with Perlego. Follow the steps provided to grant permissions in the Azure portal, ensuring the necessary attributes are released. --- [Skip to content](https://organisations.perlego.com/support/help-centre/set-up-microsoft-entra-azure-single-sign-on-sso#main-content) [Contact Us](https://organisations.perlego.com/support/help-centre/kb-tickets/new?hsLang=en) [![Logo square format-1](https://organisations.perlego.com/hs-fs/hubfs/Logo%20square%20format-1.png?width=192&height=50&name=Logo%20square%20format-1.png)](https://www.perlego.com) Open main navigation Close main navigation - [Contact Us](https://organisations.perlego.com/support/help-centre/kb-tickets/new) - [Go to Perlego](https://www.perlego.com/) [Go to Perlego](https://www.perlego.com/) How can we help? - There are no suggestions because the search field is empty. 1. [Organisation Help Centre](https://organisations.perlego.com/support/help-centre?hsLang=en) 2. [Integrations](https://organisations.perlego.com/support/help-centre/integrations?hsLang=en) 3. [Single Sign-On (SSO)](https://organisations.perlego.com/support/help-centre/integrations?hsLang=en#single-sign-on-sso) # Set up Microsoft Entra (Azure) Single Sign-On (SSO) ## This guide provides all you need to know about configuring and testing your Microsoft Entra (Azure) single sign-on (SSO) integration with Perlego. **Included**: Enhanced, Ultimate **Add-on required**: Essentials Read more about [plans](https://26048107.hs-sites-eu1.com/knowledge-base/explore-perlegos-subscription-plans?hsLang=en) and [add-ons](https://26048107.hs-sites-eu1.com/knowledge-base/unlock-additional-features-and-services-with-perlego-add-ons?hsLang=en). ### Table of contents 1. [Configuration](https://organisations.perlego.com/support/help-centre/set-up-microsoft-entra-azure-single-sign-on-sso#configuration) 1. [Share your tenant ID](https://organisations.perlego.com/support/help-centre/set-up-microsoft-entra-azure-single-sign-on-sso#share-your-tenant-ID) 2. [Permissions and Attribute release](https://organisations.perlego.com/support/help-centre/set-up-microsoft-entra-azure-single-sign-on-sso#permissions-and-attribute-release) 3. [Why must I accept there permissions?](https://organisations.perlego.com/support/help-centre/set-up-microsoft-entra-azure-single-sign-on-sso#why-must-i-accept-these-permissions) 2. [What we don't support](https://organisations.perlego.com/support/help-centre/set-up-microsoft-entra-azure-single-sign-on-sso#what-we-dont-support) ### Configuration > Before you start the configuration make sure: > > - Your organisation is on the Enhanced or Ultimate [plan](https://organisations.perlego.com/support/help-centre/explore-perlegos-subscription-plans?hsLang=en) OR you have purchased the SSO integration as an [add-on](https://organisations.perlego.com/support/help-centre/purchase-add-ons-for-your-organisation?hsLang=en). > - You have access to the [**Azure admin portal**](https://portal.azure.com/#home). > - You have an SSO account you can test with (this might be the same email address as your admin account). > - You have the **Perlego admin access link**. #### Share your tenant ID You’ll need to tell us your **[Azure Active Directory tenant ID](https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-how-to-find-tenant)**. It should have a format similar to this: `b409c5eb-9a24-4763-a43e-66e198493e81` Send us your `Tenant ID` by completing the **[Single Sign-On set up form](https://share-eu1.hsforms.com/1ntrBRgXGT5mR18uqd5RiAQfiauj)**. In the form, please also let us know if your User Principal Name (UPN) and Email attributes are the same or not. If they are different we can set up your integration to register users with their email address rather than UPN, as this provides the best experience for users on the Perlego login page. #### Permissions and attribute release We’ll let you know when SSO has been added to your account. Next you need to grant the required permissions to **Perlego**. The easiest way to do this is by logging in to **Perlego** for the first time using your admin [access link](https://26048107.hs-sites-eu1.com/knowledge-base/create-and-manage-access-links?hsLang=en). This will allow you to test the SSO is working at the same time as granting the required permissions. 1. Open the access link and accept the `terms and conditions`. 2. Click `Create your account`. 3. You’ll be re-directed to your **Azure** **authentication** page. 4. Enter the **credentials** for your **Azure** **Admin account**. If you are already logged into **Azure** on your browser you’ll skip this step. You **must** use an account that has admin level permissions within **Azure**. 5. You’ll be prompted to accept the **required permissions** on behalf of your organisation. You **must** accept these permissions for the SSO to work correctly. Once accepted, no other users will be prompted to do the same. ![Screenshot 2026-02-20 at 09.41.57](https://organisations.perlego.com/hs-fs/hubfs/Screenshot%202026-02-20%20at%2009.41.57.png?width=402&height=511&name=Screenshot%202026-02-20%20at%2009.41.57.png) 6. Once accepted, you'll be logged in to **Perlego.** The **PerlegoSSO** will now appear within your [Azure portal](https://portal.azure.com/#home). To check this: 1. Login to your **Azure portal**. 2. Click `View` on the **Manage Microsoft Entra ID** option. ![Untitled (10)](https://organisations.perlego.com/hs-fs/hubfs/Untitled%20(10).png?width=348&height=345&name=Untitled%20(10).png) 3. In the left sidebar, select `Enterprise applications`**.** 4. The **PerlegoSSO** application will be listed.![Untitled (11)](https://organisations.perlego.com/hs-fs/hubfs/Untitled%20(11).png?width=670&height=281&name=Untitled%20(11).png) If users are experiencing permissions errors whens signing up, you can re-grant the permissions from Enterprise applications \> PerlegoSSO in the **Azure portal**. 1. Go to `Enterprise applications` \> `PerlegoSSO`. 2. Under **Security** in the left side bar, select `Permissions`. 3. Click on `Grant Admin Consent for Perlego`. 4. **Accept** the permissions. ![Untitled (13)](https://organisations.perlego.com/hs-fs/hubfs/Untitled%20(13).png?width=670&height=247&name=Untitled%20(13).png) Once accepted, go to your **Perlego [access link](https://26048107.hs-sites-eu1.com/knowledge-base/create-and-manage-access-links?hsLang=en)** and test logging in with SSO. You can always check the account has been added by visiting the Perlego [**Organisation Subscription Manager.**](https://26048107.hs-sites-eu1.com/knowledge-base/access-the-subscription-manager?hsLang=en) #### Why must I accept these permissions? By accepting these permission you are ensuring the following attributes below are released through the **Microsoft Graph**. Documentation can be found **[in Microsoft's support guides](https://learn.microsoft.com/en-us/azure/active-directory-b2c/user-profile-attributes#azure-ad-user-resource-type)**. | **Attribute** | **Perlego account field** | | --- | --- | | givenName | First name | | surname | Last Name | | userPrincipalName | Email | This ensures the user profile in **Azure** can be matched and maintained against the user profile with **Perlego**. ### What we don't support We don’t currently support the following: - Restricting access to **Perlego** based on **Microsoft Azure Active Directory Groups**. - **Active Directory Federation Service (ADFS)** - [Getting started](https://organisations.perlego.com/support/help-centre/getting-started?hsLang=en) - [Analytics](https://organisations.perlego.com/support/help-centre/analytics?hsLang=en) - [Content](https://organisations.perlego.com/support/help-centre/content?hsLang=en) - [FAQs](https://organisations.perlego.com/support/help-centre/faqs?hsLang=en) - [General](https://organisations.perlego.com/support/help-centre/general?hsLang=en) - [Integrations](https://organisations.perlego.com/support/help-centre/integrations?hsLang=en#main-content) - [Single Sign-On (SSO)](https://organisations.perlego.com/support/help-centre/integrations?hsLang=en#single-sign-on-sso) - [Learning Management Systems (LMS)](https://organisations.perlego.com/support/help-centre/integrations?hsLang=en#learning-management-systems-lms) - [Library Discovery](https://organisations.perlego.com/support/help-centre/library-discovery?hsLang=en) - [Managing Users](https://organisations.perlego.com/support/help-centre/managing-users?hsLang=en) - [Organisation Account](https://organisations.perlego.com/support/help-centre/organisation-account?hsLang=en) - [Support](https://organisations.perlego.com/support/help-centre/support?hsLang=en) - [Troubleshooting](https://organisations.perlego.com/support/help-centre/troubleshooting?hsLang=en) - [AI Tools](https://organisations.perlego.com/support/help-centre/ai-tools?hsLang=en) [![Chill listening crop-3](https://organisations.perlego.com/hubfs/PerlegoLogoBlack-3.svg "Chill listening crop-3")](https://perlego.com) Organisation Help Centre Copyright © 2026, Perlego Limited ```json { "@context" : "https://schema.org", "@type" : "VideoObject", "contentUrl" : "https://26048107.fs1.hubspotusercontent-eu1.net/hubfs/26048107/Screen%20Recording%202024-05-13%20at%2012.12.35.mov", "dateModified" : "2024-05-13T15:12:10.436Z", "duration" : "PT1M11S", "height" : 2150, "name" : "Screen Recording 2024-05-13 at 12.12.35", "thumbnailUrl" : "https://26048107.fs1.hubspotusercontent-eu1.net/hubfs/26048107/Screen%20Recording%202024-05-13%20at%2012.12.35.mov/medium.jpg", "uploadDate" : "2024-05-13T15:12:10.431Z", "width" : 3832 } ```