> ## Knowledge Base Index
> Fetch the complete knowledge base index at: https://support.stacktrack.com/sitemap.xml
> Use this file to discover available pages before exploring further.
> Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash).

# Setup Microsoft Identity Provider

This solution will only work if your Azure AD endpoints do not contain tenant IDs. If they do contain the tenant ID we recommend using [OpenID Connect](https://support.servanamanaged.com/support/solutions/articles/103000102798-configure-azure-ad-with-openid-connect) or SAML.

NB: Notice in the screenshot below the Directory (Tenant) parameter is not in the Endpoints on the right.

![](https://storage.crisp.chat/users/helpdesk/website/-/c/1/c/0/c1c0a65d9a687000/649dd753-24a8-4af9-b3db-8a357d_1ly0h3q.png)

From the Servana Identity Service.

***Step-1:*** Navigate to Identity Providers and choose Microsoft from the list.

![](https://storage.crisp.chat/users/helpdesk/website/-/3/1/c/a/31caa5c2dbdcd000/c39c84bf-ff47-47fd-b993-db1d17_5if0ap.png)

![](https://storage.crisp.chat/users/helpdesk/website/-/e/b/5/b/eb5b7684bc243000/4e18e5a3-cfc7-4100-b273-febc76_csmii0.png)

***Step-3:*** Copy the Redirect URI

![](https://storage.crisp.chat/users/helpdesk/website/-/4/b/f/d/4bfd9d9964c63c00/12367e91-cf5d-4e3e-a29e-ed93f0_29eadk.png)

***Azure End:***

***Step-4:*** Create an Azure Application Registration for the Jenkins Service (in App Registration). Reference Document [link](https://docs.microsoft.com/en-us/azure/active-directory/develop/quickstart-register-app#register-an-application). Ensure the redirect URI copied in step-2 is added for the new application.

***Step-5:*** Create a Client Secret for the newly registered application. Reference Document [link](https://docs.microsoft.com/en-us/azure/active-directory/develop/quickstart-register-app#add-credentials)

***Servana Identity Service:***

***Step-6:***

1. Enter the Application Client ID of the new application created in Azure(*Step-4*).
2. Enter the Secret created in (*Step-5*), leave rest default, and click on save.

![](https://storage.crisp.chat/users/helpdesk/website/-/3/c/2/3/3c2338000c430e00/0197c239-3037-4526-83a6-6871eb_1vb35hq.png)

Once the above steps are completed successfully, a new button appears on the Jenkins login screen(screenshot below).

Once done, you can set up [mappers to sync groups](https://support.servanamanaged.com/support/solutions/articles/103000102837-map-azure-ad-groups) from Azure and automatically manage User onboarding.