SSO with Microsoft Entra ID
Prepare your Microsoft Entra ID (Azure AD) tenant before the SSO implementation call.
Before the call
Rilla uses Auth0 for authentication and supports enterprise SSO through Microsoft Entra ID. Have these ready before the implementation call:
| What | Details |
|---|---|
| Entra ID domain | Your organization's Azure AD domain, such as yourcompany.onmicrosoft.com. |
| An administrator | Someone with the Global Administrator or Application Administrator role who can register applications, grant admin consent, and approve consent requests during or after the call. |
| An app registration | Registered in your tenant with the values below. |
Register an application
In the Microsoft Entra admin center, register an application for Rilla and collect:
| Value | Where to find it |
|---|---|
| Application (client) ID | Generated when you register the app. |
| Client secret | Create one under Certificates & secrets. Copy the secret Value, not the secret ID. |
| Redirect URI | Add https://login.rilla.com/login/callback as a Web redirect URI, exactly as written. |
Check user attributes
Rilla reads these attributes from Entra when someone signs in:
| Attribute | Required |
|---|---|
email | Yes |
| First name | No |
| Last name | No |
Rilla doesn't read phone numbers or other extended profile attributes from Entra, so the app only needs the basic sign-in permissions. Users can add a phone number in Rilla themselves.
What we do on the call
Together with Rilla, we will:
- Register the application, if it isn't done yet
- Create the Microsoft Entra ID enterprise connection in Auth0 with your application ID and client secret
- Set attribute mappings and enable the connection for Rilla
- Make sure administrator consent is granted
- Test the full SSO sign-in flow
- Troubleshoot any user assignment or access issues
Good to know
- The connection uses OAuth 2.0 / OpenID Connect, not SAML, so no certificates are needed.
- Once configured, regular users sign in without any admin involvement.
For the technical details, see Auth0's Microsoft Azure AD integration guide.
Next: sync users and teams with SCIM