# Third Party Login / SSO

> Source: https://docs.recombee.com/third_party_login_sso

> For the complete documentation index, see [llms.txt](/llms.txt).

**Table of contents**

* [OpenID Connect](#openid-connect)
* [Microsoft Entra (Azure AD)](#microsoft-entra-azure-ad-)  
   * [1\. Register a New Microsoft Entra Application](#-register-a-new-microsoft-entra-application)  
   * [2\. Create a New Microsoft Entra Application Secret](#-create-a-new-microsoft-entra-application-secret)  
   * [3\. Create a Development User](#-create-a-development-user)  
   * [4\. Look Up Your Login Domain](#-look-up-your-login-domain)  
   * [5\. Contact Recombee Support](#-contact-recombee-support)

# Third Party Login / SSO

Organizations on Pro and Premium plans can use their own services for authentication with Recombee Admin UI.

## OpenID Connect

Any service with support for the OpenID Connect can be used for authenticating the access to the Recombee Admin UI.

Please contact our support team for more details regarding the integration.

## Microsoft Entra (Azure AD)

### 1\. Register a New Microsoft Entra Application

1. Pick an application name
2. Set "Supported account types" to "Accounts in this organizational directory only (Single tenant)"
3. Set "Redirect URI" to `Web` and `https://oauth.recombee.com/oauth2/callback`
4. Proceed by clicking "Register"

![](/img/third_party_login_sso/entra.microsoft.com_app-registration.png)

Once the application has been created, note the `Application (client) ID` and the `Directory (tenant) ID`.

![](/img/third_party_login_sso/entra.microsoft.com_app-detail.png)

### 2\. Create a New Microsoft Entra Application Secret

Navigate to _Microsoft Entra -> App Registrations -> \[Your Application\] -> Certificates & secrets -> New client secret_ to create a new Microsoft Entra Application Client Secret.

![](/img/third_party_login_sso/entra.microsoft.com_create-client-secret.png)

Copy the `Value` of the newly created client secret using the copy button. This information can be copied just once, right after secret creation.

![](/img/third_party_login_sso/entra.microsoft.com_certs-secrets.png)

### 3\. Create a Development User

Add new user in your Microsoft Entra account with an access to the configured application for Recombee to be able to verify the authentication setup.

### 4\. Look Up Your Login Domain

Note the domain name of email addresses assigned to your users. For example if your users have email addresses like _[john.doe@mycompany.com](mailto:john.doe@mycompany.com)_, then your login domain is _mycompany.com_. This might be the domain name visible under "Primary domain" at the Tenant overview page but might be configured to be a different domain by your Microsoft Entra administrator.

![](/img/third_party_login_sso/entra.microsoft.com_tenant-overview.png)

### 5\. Contact Recombee Support

Assemble the noted information:

* Your company Microsoft Entra "Primary domain" (e.g. `mycompany.com`).
* `Application (client) ID`
* `Directory (tenant) ID`
* Client secret `Value`.
* Development user email and password.

and contact Recombee support to start authentication integration.