Set up SSO with Microsoft Entra ID

Connect Microsoft Entra ID (formerly Azure AD) to Clakta so your team can sign in with their Microsoft work account. You'll need permission to create enterprise applications in Entra ID and to be an owner of your Clakta team. SSO is available on the Enterprise plan.

Start in Clakta

1. Go to Team settings → Security and click Configure under SAML single sign-on.
2. Choose Microsoft Entra ID. Keep this dialog open: you'll copy the ACS URL and the Entity ID from it.

Create the app in Entra ID

1. In the Microsoft Entra admin center, go to Enterprise applications and click New application.
2. Click Create your own application, name it Clakta, choose Integrate any other application you don't find in the gallery and click Create.
3. Open Single sign-on and choose SAML.
4. In Basic SAML Configuration, click Edit and fill in:
   • Identifier (Entity ID): the Entity ID from Clakta.
   https://saml.clakta.com

   • Reply URL (Assertion Consumer Service URL): the ACS URL from Clakta.
   https://api.clakta.com/auth/saml/callback

5. Click Save.
6. In Attributes & Claims, keep the default claims. Make sure emailaddress comes from user.mail.

Connect it to Clakta

1. In SAML Certificates, copy the App Federation Metadata Url.
2. Back in Clakta, paste it into App Federation Metadata URL and click Save.

Give people access

In Users and groups, add the people or groups who should use Clakta. They can now click Sign in with SSO on the Clakta login page, or open Clakta from My Apps.

To also add and remove members automatically, set up directory sync with Microsoft Entra ID.

Common questions