Folllow these instructions to allow your users to login to your Buildstash workspace using Microsoft Entra (formerly Azure Active Directory).<blockquote>This feature is available on the Ultra and Enterprise plans.If you would like it activated on your workspace please contact support.<a href="https://docs.buildstash.com/integrations/sso/jumpcloud#create-sso-application-in-jumpcloud" target="_blank" rel="noopener noreferrer nofollow" class="cursor-pointer box-border border-b hover:border-b-[2px] transition-all duration-75 " style="text-decoration: none; border-color: var(--portal-accent-color);">​</a></blockquote><h2>Create SSO Application in Entra admin center</h2><ol class="steps-list"><li>Create new enterprise application In your Entra admin center, navigate to Entra ID &gt; App registrations, then select "New registration". <img src="https://uploads.productlane.com/eb6d5014d9156f1050fda95ad7d793c7.png"> </li><li>Confirm application details Enter "Buildstash" as the application name. To limit access to only users in your organization directory select "Single tenant". And under redirect URI select "Web" and enter your redirect URI. You can copy/paste your redirect URI from the Buildstash interface if helpful (see below). <img src="https://uploads.productlane.com/620014242553009d159254b0ea99e050.png"> </li><li>Note client ID and tenant ID In the "Overview" screen you're taken to for this app, note the "Application (client) ID" to provide as "Client ID" in Buildstash configuration, and also your Tenant ID for the later step. <img src="https://uploads.productlane.com/4d2b7e65a500bc4432a1f8a766b0a2ae.png"> </li><li>Get client secret You'll also need to generate your client secret. Navigate to "Certificates &amp; secrets". Then select "Client secrets", and "New client secret". Select an expiry date for the secret - we highly recommend you take a note of this date in your calendar. Then the secret is created, you want to copy and take note of the "value" column to use for "Client secret" when setting up in Buildstash. </li><li>Remember and set user access Remember and assign the app to anyone you wish to have access in Entra.</li></ol><h2>Configure SSO in Buildstash</h2><ol class="steps-list"><li>Enable SSO provider Go to your workspace settings, and under “Enterprise SSO”, select “Enable provider”.<img src="https://uploads.productlane.com/2bd9a99767f8b4d5112a77c04734a842.png"> </li><li>Input provider credentials Input the client ID, secret, and tenant ID for Entra you copied noted from the previous step. Your redirect URI to enter within Entra is also shown here.<img src="https://uploads.productlane.com/2fd166baaa13098853413ecf3471edfe.png"></li><li>Confirm correctly configured Once details are entered and confirmed you’ll see Microsoft Entra connected. <img src="https://uploads.productlane.com/aaf14e0ef18e00b56a33d4a8884a75b5.png">Select “Manage” to update credentials in future, disable non-SSO login, or remove Entra as a login provider in future. <img src="https://uploads.productlane.com/659c26f5084f7df025cc67567d74e6e4.png">You can optionally require users login via this SSO provider to access your workspace, and there's an option to auto-add users who login via this provider to your workspace if they're not already a member. </li><li>Login with SSO You can now navigate to the login page on your workspace custom subdomain, and the Entra SSO option will be presented.</li></ol>

Integrations

Microsoft Entra

Guide

Get started

GitHub Actions

Azure DevOps Pipelines

fastlane

AWS S3

JumpCloud

Okta

Auth0

Docs

Buildstash