How to add a Microsoft Entra SSO to your CMS

This article goes through all the steps to configure Google Single Sign, a fast and secure way to log into the CultureSuite CMS.

Step 1: Request the Redirect URI from CultureSuite

1. Contact our Customer Success team to request the Redirect URI.

Step 2: Register the Application in Microsoft Entra ID

1. Go to the Azure Portal and navigate to Microsoft Entra ID.

2. Go to App Registrations → New Registration.
 

3. Fill in the following:
• Name: e.g. Keycloak-Integration
• Supported account types: Accounts in this organizational directory only
• Redirect URI: paste the URI received from CultureSuite in step 1
 

4. Click Register.

5. Navigate to Certificates & Secrets → New client secret, create a secret and copy the value immediately.
 

6. Under API Permissions, select Add a permission, select Microsoft Graph.
1. Add click Grant admin consent:
• openid
• email
• profile
• User.Read
 

7. Copy the Application (Client) ID from the app's Overview page.

8. From the Azure Portal overview, also copy the Tenant ID.

📤 Client sends to CultureSuite: the Client ID, the Client Secret, and the Tenant ID.

Step 3: CultureSuite configures the Entra ID Identity Provider in Keycloak

Step 4: Verify the Integration

1. Open the CMS login page for the configured realm.

2. Confirm that Login with Microsoft Entra ID appears as an option.

3. The first time you log in, you are shown a message. This means your log in was succesfull, but you don’t have a CMS role yet (admin or user).
1. If you are the first (admin), please contact CultureSuite so we can set your admin role.
2. After that, you can configure roles for all your colleagues via the CMS users module after their first login.

 

 

 

 

Information Exchange Summary