Skip to main content

Configuring SSO with Microsoft Entra ID

Written by CJ Teeter

📚 Overview

Shred supports SSO with Microsoft Entra ID (formerly Azure Active Directory) so your team can sign in using their Microsoft 365 credentials.

This guide walks admins through creating an App Registration in Entra (Azure) ID, collecting four values, and sharing them with the OpenAsset team:

  • Display name

  • Client ID

  • Client Secret

  • Tenant ID

Prerequisites

  • Admin permissions in Microsoft Entra (Azure) ID to create App registrations and secrets. Microsoft’s quickstart confirms where to do this. Microsoft Learn

  • Your organization uses Microsoft 365 / Entra ID for identity.

What you’ll send to your Shred Onboarding contact

After completing the steps below, send the following to support@openasset.com:

  • Display name (the label users will see on Shred’s login screen and in Team Management)

  • Client ID (also called Application (client) ID)

  • Client Secret (a password you’ll generate for the app)

  • Tenant ID (also called Directory (tenant) ID)

✔ Step-by-step process

1) Register the application

  • Sign in to the Microsoft Entra admin center.

  • Go to Entra ID → App registrations → New registration.

  • Enter a clear Name (e.g., “Shred SSO”).

  • Leave supported account types as your default (most orgs choose “Accounts in this organizational directory only”).

  • Under Redirect URL, select "web"

  • Click Register.
    ​Reference: Microsoft quickstart on App registrations. Microsoft Learn

You now have:

  • Client ID: visible on the app’s Overview page as Application (client) ID.

  • Tenant ID: visible on the app’s Overview page as Directory (tenant) ID. Microsoft documents multiple ways to find it if needed. Microsoft Learn

  • Display name: visible on the app's Overview page as Display name.

    • This will be shown on Shred’s login button and in Team Management once SSO is enabled on our side. (You can rename the app later; the label in Shred will follow what you provide.)

2) Create a Client Secret

  1. Inside your App Registration, open Certificates & secrets.

  2. Under Client secrets, select New client secret.

  3. Add a description (e.g., “Shred SSO”), choose an expiry that aligns with your policy, and Add.

  4. Copy the Secret value immediately and store it securely—Azure will hide it after you leave the page.
    ​Reference: Microsoft and community guidance on generating client secrets. Microsoft Learn+1

You now have:

  • Client Secret: the Value you copied (not the Secret ID).

3) (If requested by your Shred onboarding contact) Add Redirect URI(s) / Basic OIDC settings

If your IM provides Redirect URI(s) to add:

  1. In the App Registration, open Authentication.

  2. Click Add a platform → Web and paste the Redirect URI provided by Shred.

  3. Ensure Access tokens and ID tokens are enabled if your IM requests them (OIDC).
    ​Note: Your Shred IM will confirm if any URIs or optional claims are required for your tenant. Microsoft’s SSO docs cover broader SAML/OIDC options if your security team asks. Microsoft Learn

4) Share the details with support@openasset.com

Provide our team with:

  • Display name

  • Client ID (Application ID)

  • Client Secret (Value)

  • Tenant ID (Directory ID)

Did this answer your question?