Microsoft Entra ID, formerly known as Azure AD, is a supported IdP for SSO into Statsig.

## Requirements

* You must be the `Admin` of the Statsig Project you intend to add SSO with Azure AD to.
* You must be the Administrator of the Azure AD tenant you want to link.

## Supported Features

You can enable Service Provider (SP)-Initiated Authentication for Single Sign-On (SSO) using OIDC on Statsig to connect your Azure AD account to your Statsig Projects.

## Configure SSO with Azure AD

### Adding the Statsig OIDC Application in Azure AD

1. Navigate to App Registrations in the Azure portal.
2. Click on the "New Registration" button to register the Statsig App.
3. Provide a name (for example, Statsig Console) and finish creation. For the Redirect URI, use https://console.statsig.com/sso/oidc.
4. Select Certificates and secrets for this app from the left nav and create a new client secret. Save the value; you can't retrieve this value after creation.

{% figure %}
![Azure AD app registration interface](/images/access-management/sso/azuread/153957278-5f463453-dd7a-443b-9c1c-2a8c205995f6.png)
{% /figure %}

Enter three items in the Statsig SSO configuration:

1. Find the Azure AD OIDC URL for this app under Overview -> Endpoints -> OpenID Connect metadata document. Truncate the string to end at "/v2.0".
2. Get the client ID for this app from Overview -> Application (client) ID.
3. Get the client secret value you saved after creating a new client secret.

After completing these steps, the Azure AD configuration is complete. Navigate to [SSO configuration on your Statsig Project](/access-management/sso/overview#configure-sso-with-oidc) to finish setup.