Staffcloud – SSO Setup & Usage Guide (Microsoft Azure)

The SSO Integration (Single Sign-On) is a paid add-on. To activate it, please contact us at support@staff.cloud

CONTENT

• Overview
• Setting up SSO (Organization-wide)
• Linking a Microsoft Account (for planners)

Overview

The SSO integration (Single Sign-On) allows all users in your organization to log in to Staffcloud via Microsoft Azure (Entra ID / Azure AD). This guide covers both the administrator setup and the user account linking process.

Setting up SSO (Organization-wide)

Prerequisite:
An administrator with rights to create an App registration in Microsoft Entra ID.

1. Prepare Staffcloud
   • Go to: Configuration → Add Ons → SSO → Configure. 
   • Copy the pre-filled Redirect URL (you will use this in Azure).
   • Tip: Hover over the question-mark icon for inline instructions. 
2. Register the app in Azure
   • Open the Azure Entra Portal → App registrations → New registration.
   • Enter a name and select supported account types.
   • Add the copied Redirect URL as a Web redirect URI.
   • Click Register.
3. Fill in Staffcloud form
   • In the Azure App Registration Overview, copy and paste into Staffcloud:
     • Application (Client) ID
     • Directory (Tenant) ID
4. Create a client secret
   • In Azure: Certificates & secrets → New client secret.
   • Generate a secret and copy the Value (not the ID).
   • Paste the Value into the Staffcloud Client Secret field.
5. Finish setup
   • Save the configuration in Staffcloud.
   • SSO is now enabled for your organization.

Linking a Microsoft Account (for planners)

The steps for users after setup by the administrator are as follows:

1. Log in with username/password.

2. Top-right: click Name → My Account.

3. Under SSO Accounts, click Microsoft. 

4. Log in to Microsoft if prompted.

5. You return to My Account — the Microsoft button turns green once linked.

6. For future logins: simply click Sign in with Microsoft.